---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Discover firewall policies

# Discover firewall policies {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
As a member of a security team, you can discover firewall devices, policies, and
owner groups from supported vendors (Palo Alto Panorama and Fortinet FortiManager), allowing a central view of the footprint. This data is updated in the ServiceNow
CMDB. Set up a schedule to discover your firewall policies to help you keep track of your company's valuable information.

## Before you begin

Role required: discovery_admin, firewall_admin

## About this task

Administrators in charge of Discovery can establish a recurring schedule for firewall policy discovery. This schedule utilizes the serverless pattern, connecting with the firewall manager to discover and update information for Configuration Items
(CIs) in the CMDB.

For Fortinet FortiManager-specific requirements, including MID Server sizing and API endpoint information, see [Fortinet FortiManager discovery requirements](https://www.servicenow.com/docs/Ct0ImjdOYXTrvaUWPBSo4g "Technical requirements and configuration details for discovering Fortinet FortiManager firewalls using the Firewall Audits and Reporting application.").
{#disco-firewall-policies__table_firewall_cis__entry__3}

| Vendor | CMDB Configuration Items | Non-CMDB Tables |
|-|-|-|
| Palo Alto Panorama | * Panorama Firewall Manager \[cmdb_ci_firewall_manager_panorama\] * Palo Alto Firewall Devices \[cmdb_ci_firewall_device_palo_alto\] * Panorama Firewall Device Group \[cmdb_ci_firewall_device_group_panorama\] * Panorama Firewall Security Policies \[cmdb_ci_firewall_sec_policy_panorama\] | * Panorama Address Objects * Panorama Address Group Objects * Panorama Service Objects * Panorama Service Group Objects * Policy Object M2M References |
| Fortinet FortiManager | * FortiManager Network Manager \[cmdb_ci_fortimanager_network_manager\] * Fortinet Firewall ADOM \[cmdb_ci_firewall_device_group_fortinet\] * Fortinet Firewall Device \[cmdb_ci_firewall_device_fortinet\] * Fortinet Firewall Policy Package \[cmdb_ci_fortinet_firewall_policy_pkg\] * Fortinet Firewall Policy \[cmdb_ci_fortinet_firewall_policy\] | * Fortinet Address Objects \[sn_disco_firewall_fortinet_address_object\] * Fortinet Address Group Objects \[sn_disco_firewall_fortinet_addrgrp_object\] * Fortinet Service Objects \[sn_disco_firewall_fortinet_service_object\] * Fortinet Service Group Objects \[sn_disco_firewall_fortinet_servicegrp_object\] * Fortinet VIP Objects \[sn_disco_firewall_fortinet_vip_object\] * Fortinet VIP Group Objects \[sn_disco_firewall_fortinet_vipgrp_object\] * Fortinet ISDB Objects \[sn_disco_firewall_fortinet_isdb_object\] * Firewall Policy Object M2M Mappings \[sn_disco_firewall_policy_object_m2m\] |
[Table 1. Firewall Configuration Items and tables by vendor]

{#disco-firewall-policies__table_firewall_cis}

## Procedure

1. Create a new credential of type API Key Credentials.  
   Enter the API key for your firewall vendor in the credential record.
2. Create a credential alias for the API key credential created in the previous step.  
   You provide this credential alias in the discovery schedule configuration. For more information, see [Credential aliases for Discovery](https://www.servicenow.com/docs/access?context=discovery-credential-alias&version=australia&pubname=australia-platform-security&ft:locale=en-US).
3. To create a Discovery schedule, perform the following steps.  
   1. Select Discover: Serverless.
   2. Select the appropriate MID Server.
   3. Right-click the header and select Save.

   {#disco-firewall-policies__ol_tkt_jmx_nlb}For more information on Discovery schedule, see [Schedule a horizontal discovery](https://www.servicenow.com/docs/VO0owNull6HAfXGFWMKxhg#t_CreateADiscoverySchedule "A discovery schedule determines what horizontal discovery searches for, when it runs, and which MID Servers are used. Create a discovery schedule for your local environment or a schedule for discovering the resources in your cloud service account.").
4. From the tab at the bottom of the screen, select the Serverless Execution pattern and then select New.
5. In the Serverless Execution pattern, perform the following steps.  
   1. Enter a name.
   2. Select the pattern for your vendor:
      * For Palo Alto Panorama: Select PaloAlto - Firewall Manager.
      * For Fortinet FortiManager: Select Fortinet FortiManager (LP).
   3. Select Run Child Patterns.
   4. Select Submit.
   {#disco-firewall-policies__ol_svl_tsv_31c}
6. Navigate to Discovery Pattern Launcher Parameters and set the following parameters.  
   * credentialAlias: Provide the credential alias name created in step 2.
   * For Palo Alto Panorama:
     * url: Set to the base URL of your Panorama device (https://\<PANORAMA_HOST\>/api).
     * trustInsecureHosts: Set to true to turn off hostname verification and enable self-signed certificates to be accepted as trusted.
   * For Fortinet FortiManager: Set the ipAddress parameter to the IP address of your FortiManager appliance.
7. Right-click the header and select Save.
{#disco-firewall-policies__steps_o34_wlx_nlb}