Has ServiceNow implemented a web application firewall (WAF)?

[Caperer]

Has ServiceNow implemented a web application firewall (WAF) to protect instances from common web application attacks?

[Jeff Boltz1]

Check the ServiceNow CORE:

ServiceNow CORE - ServiceNow Community

[Caperer]

Thanks Jeff.

[kevclark]

I'm interested in this content too @Jeff Boltz but it appears to be inaccessible to me.  Do you know if there's an alternate way to get to that link?

[Community Alums]

Hi @Caperer ,

OOB these are not supported by servicenow, but you can create new custom classes, classifier and pattern and other related components and proceed with your implementation.

Refer snow doc link on the support of firewall below.

https://docs.servicenow.com/bundle/store-release-notes/page/release-notes/store/it-operations-manage...

 for service mapping for web application You are going to need to add a connectivity section to the IIS Virtual Directory Pattern that parses the URL out of the config file. Once you do that you should see the next hop IIS server and it may or may not find the database server. If it doesn't then you will have to do something similar in which you will create a connectivity section to pull out the configuration for the SQL server. It will most likely either be in the web.config file (make sure your URLs are correct so they go into the right IIS Website) or some other configuration file that may reference the ODBC DSN setup in Windows (which you can pull from the registry). 

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep