---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Cisco Firewall

# Next-Generation
Cisco Firewall discovery {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Next-Generation Cisco Firewall discovery

The ServiceNow Discovery application includes a Next Generation Cisco Firewall pattern designed to locate and identify Cisco firewall devices on your network.
It uses SNMP calls during horizontal discovery to gather detailed information about Cisco firewalls and populates this data into the CMDB.
The pattern is supported on the ServiceNow AI Platform® starting with the Madrid release and later.
Show full answer Show less  

## Prerequisites

* Ensure SNMP access is enabled on your Cisco firewall devices.
* Configure SNMP credentials within your ServiceNow instance.
* Add the SNMP system OID record for Cisco devices to your instance.
* Update the classifier and class to identify Cisco firewall devices correctly.

## Deployment

* Download and install the Firewall extension classes app from the ServiceNow Store to add new CMDB classes required for firewall discovery.
* Download and install the Discovery and Service Mapping Patterns application from the Store.
* Synchronize the discovery pattern with the appropriate MID Server to enable discovery execution.

## Data Collected and CMDB Population

During discovery, essential fields are collected and populated into several CMDB tables representing the Cisco firewall and its components:

* **Cisco Firewall Device \[cmdbcifirewalldevicecisco\]**: Serial number, device name (FQDN), IP address, firmware version, manufacturer, model ID, hardware OS and version, operational and hardware status, and a short description.
* **IP Address \[cmdbciipaddress\]**: IP address, netmask, and reference to the network adapter.
* **Network Adapter \[cmdbcinetworkadapter\]**: IP address, alias, netmask, MAC address, name, and a reference back to the firewall device.
* **DNS Name \[cmdbcidnsname\]**: DNS name and associated IP address.

## Configuration Item (CI) Relationships

The discovery process establishes key relationships among CIs to accurately represent the firewall environment and dependencies, including:

* Cisco Firewall Device owning IP Addresses and Network Adapters.
* Firewall Device usage of Router Interfaces.
* References between IP Addresses and Network Adapters.
* Associations to serial number records and router interfaces for comprehensive tracking.

## Practical Impact for ServiceNow Customers

Implementing this discovery pattern enables accurate, automated identification and inventory of Cisco firewall devices within your ServiceNow CMDB. This enhances visibility into firewall assets, their configurations, and network relationships, supporting improved security posture, compliance, and operational management.  
The ServiceNow
Discovery application uses the Next Generation Cisco Firewall pattern to find Cisco firewalls. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.
The discovery pattern uses a set of SNMP calls to find the Cisco firewalls. Discovery uses the pattern to run horizontal discovery.

You can use this pattern on the ServiceNow AI Platform® using the Madrid release or later.

## Request apps on the Store {#cisco-fw-discovery__section_jj1_md3_slb}

Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#cisco-fw-discovery__inline-send-to-store}

## Prerequisites {#cisco-fw-discovery__section_hx3_td3_slb}

* Ensure that your network firewall device has SNMP access.
* On the ServiceNow instance, configure SNMP credentials. For more information, see [SNMP credentials](https://www.servicenow.com/docs/access?context=c_SNMPCredentials&version=australia&pubname=australia-platform-security&ft:locale=en-US).
* Add the SNMP system OID record for the Cisco device to the ServiceNow instance. Update the following:
  * Classifier: Cisco Firewall
  * Class: Cisco Firewall Device
  {#cisco-fw-discovery__ul_utn_zd3_slb}
* Deploy the pattern as follows:
  1. Download and install [Firewall extension classes](https://www.servicenow.com/docs/access?context=cmdb-ci-class-models-fw&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US) from the ServiceNow Store. The app adds the new CMDB classes required for network firewall discovery.
  2. Download and install the Discovery and Service Mapping Patterns application from the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home).
  3. Sync the pattern with the appropriate MID Server.
  {#cisco-fw-discovery__ol_akd_k23_slb}
{#cisco-fw-discovery__ul_v4t_5d3_slb}

## Data collected by Discovery during horizontal discovery {#cisco-fw-discovery__section_jqb_q23_slb}

Discovery populates the data in the CMDB when running the Next Generation Cisco Firewall pattern.  
{#cisco-fw-discovery__table_pfs_jx5_lfc__entry__2}

| Field | Description |
|-|-|
| Serial number \[serial_number\] | Serial number of the device. |
| Name \[name\] | Administratively assigned name for this managed node. By convention, this is the node's fully qualified domain name (FQDN). |
| IP Address \[ip_address\] | IP address of the device. |
| Firmware version \[firmware_version\] | Firmware version. |
| Fully qualified domain name \[fqdn\] | FQDN of the device. |
| Manufacturer \[manufacturer\] | Device manufacturer. |
| Model ID \[model_id\] | Device model name. |
| Harware OS \[hardware_os\] | Operating system (OS) running on the hardware. |
| Hardware OS Version \[hardware_os_version\] | OS version running on the hardware. |
| Description \[short_description\] | Short description of the Cisco device. |
| Operational status \[operational_status\] | Indicates if the device is in active state. |
| Hardware Status \[hardware_status\] | Detailed description of the current status of the resource. |
[Table 1. Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\]]

{#cisco-fw-discovery__table_pfs_jx5_lfc}  
{#cisco-fw-discovery__table_qrh_jz5_lfc__entry__2}

| Field | Description |
|-|-|
| IP Address \[ip_address\] | IP address of the Cisco firewall. |
| Netmask \[netmask\] | Netmask of the Cisco firewall. |
| Nic \[nic\] | References the Network Adapter \[cmdb_ci_network_adapter\] table. |
[Table 2. IP Address \[cmdb_ci_ip_address\]]

{#cisco-fw-discovery__table_qrh_jz5_lfc}  
{#cisco-fw-discovery__table_q3n_4z5_lfc__entry__2}

| Field | Description |
|-|-|
| IP Address \[ip_address\] | IP address of the network adapter. |
| Alias \[alias\] | User-assigned name for the network adapter. |
| Netmask \[netmask\] | Netmask of the network adapter. |
| MAC Address \[mac_address\] | MAC address of the network adapter. |
| Name \[name\] | Name of the network adapter. |
| Configuration Item \[cmdb_ci\] | References the Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] table. |
[Table 3. Network Adapter \[cmdb_ci_network_adapter\]]

{#cisco-fw-discovery__table_q3n_4z5_lfc}  
{#cisco-fw-discovery__table_asl_5z5_lfc__entry__2}

| Field | Description |
|-|-|
| Name \[name\] | Name of the Domain Name System (DNS). |
| IP Address \[ip_address\] | IP address of the DNS. |
[Table 4. DNS Name \[cmdb_ci_dns_name\]]

{#cisco-fw-discovery__table_asl_5z5_lfc}  
This Dependency Views map on the Cisco Firewall Device CI shows the Cisco Firewall Device.  

## CI relationships {#cisco-fw-discovery__section_ky2_vh3_slb}

These relationships are created to support Cisco firewall discovery.  
{#cisco-fw-discovery__table_dhk_zz5_lfc__entry__3}

| CI | Relationship | CI |
|-|-|-|
| Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] | Owns::Owned by | IP Address \[cmdb_ci_ip_address\] |
| Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] | Owns::Owned by | Network Adapter \[cmdb_ci_network_adapter\] |
| Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] | Uses::Used by | Router Interface \[dscy_router_interface\] |
| IP Address \[cmdb_ci_ip_address\] | References | Network Adapter \[cmdb_ci_network_adapter\] |
| Network Adapter \[cmdb_ci_network_adapter\] | Owns::Owned by | IP Address \[cmdb_ci_ip_address\] |
| Network Adapter \[cmdb_ci_network_adapter\] | References | Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] |
| Router Interface \[dscy_router_interface\] | References | Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] |
| Serial Number \[cmdb_serial_number\] | References | Cisco Firewall Device \[cmdb_ci_firewall_device_cisco\] |
[ ]

{#cisco-fw-discovery__table_dhk_zz5_lfc}