Next-Generation Juniper Network Firewall discovery

The ServiceNow Discovery application uses the Next-Generation Juniper Network Firewall discovery pattern to find Juniper network firewalls. Discovering some of these resources may require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

The discovery pattern uses a set of SNMP calls to find the Juniper network firewalls. Discovery uses the pattern to run horizontal discovery.

You can use this pattern on the ServiceNow AI Platform® using the Madrid release or later.

Request apps on the Store

Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Prerequisites

• Ensure that your network firewall device has SNMP access.
• On the ServiceNow instance, configure SNMP credentials.
• Add the SNMP system OID record for the Juniper device to the ServiceNow instance. Update the following:
  • Classifier: Juniper Firewall
  • Class: Juniper Firewall Device

Deploy the pattern as follows:

1. Download and install the CMDB CI Class Models: Release 1.10.0 from the ServiceNow Store. The app adds the new CMDB classes required for network firewall discovery. For more information, see Firewall extension classes.
2. Download and install the discovery pattern from the ServiceNow Store.
3. Sync the pattern with the appropriate MID Server.

Data collected by Discovery during horizontal discovery

The discovered data includes the following tables and fields.

Table and field	Description
IP Firewall [cmdb_ci_ip_firewall] - Contains all network firewalls.
Name [name]	Hostname.
Serial Number [serial_number]	Device serial number.
Operational Status [operational_status]	Indicates if the device is in active state.
IP address [ip_address]	IP address.
Manufacturer [manufacturer]	Device manufacturer.
Description [short_description]	Short description.
Model Number [model_number]	Device model number.
Firmware [firmware_version]	Firmware version.
Hardware Operating System [hardware_os]	OS running on the hardware.
Hardware OS Version [hardware_os_version]	OS version running on the hardware.
Firewall Device [cmdb_ci_firewall_device] - Abstract class for vendor-specific firewalls.
Name [name]	Hostname.
Serial Number [serial_number]	Serial number of the device.
Fully qualified domain name [fqdn]	Fully qualified domain name.
Operational Status [operational_status]	Indicates if the device is in active state.
IP address [ip_address]	IP address.
Manufacturer [manufacturer]	Device manufacturer.
Description [short_description]	Short description.
Model Number [model_number]	Device model number.
Firmware [firmware_version]	Firmware version.
Hardware Operating System [hardware_os]	OS running on the hardware.
Hardware OS Version [hardware_os_version]	OS version running on the hardware.
Juniper Firewall Device [cmdb_ci_firewall_device_juniper] - Contains physical Juniper firewalls.
Name [name]	Hostname.
Serial Number [serial_number]	Serial number of the device.
Fully qualified domain name [fqdn]	Fully qualified domain name.
Operational Status [operational_status]	Indicates if the device is in active state.
IP address [ip_address]	IP address.
Manufacturer [manufacturer]	Device manufacturer.
Description [short_description]	Short description.
Model Number [model_number]	Device model number.
Firmware [firmware_version]	Firmware version.
Hardware Operating System [hardware_os]	OS running on the hardware.
Hardware OS Version [hardware_os_version]	OS version running on the hardware.
Firewall Cluster [cmdb_ci_firewall_cluster] - Abstract class for a vendor-specific firewall cluster.
Name [name]	Hostname.
Fully qualified domain name [fqdn]	Fully qualified domain name.
IP address [ip_address]	IP address.
Manufacturer [manufacturer]	Device manufacturer.
Description [short_description]	Short description.
Model Number [model_number]	Device model number.
Hardware Operating System [hardware_os]	OS running on the hardware.
Hardware OS Version [hardware_os_version]	OS version running on the hardware.
Juniper Firewall Cluster [cmdb_ci_firewall_cluster_juniper] - Contains Juniper firewall cluster.
Name [name]	Hostname.
Fully qualified domain name [fqdn]	Fully qualified domain name.
IP address [ip_address]	IP address.
Manufacturer [manufacturer]	Device manufacturer.
Description [short_description]	Short description.
Model Number [model_number]	Device model number.
Hardware Operating System [hardware_os]	OS running on the hardware.
Hardware OS Version [hardware_os_version]	OS version running on the hardware.

The Dependency Views map on the Juniper Firewall Device CI shows the Juniper Firewall Cluster to which it belongs.

CI relationships

These relationships are created to support Juniper network firewall discovery:

CI	Relationship	CI
Firewall Cluster [cmdb_ci_firewall_cluster]	Extends from	Cluster [cmdb_ci_cluster]
Juniper Firewall Cluster [cmdb_ci_firewall_cluster_juniper]	Extends from	Firewall Cluster [cmdb_ci_firewall_cluster]
	Hosted::Hosted on	Juniper Firewall Device [cmdb_ci_firewall_device_juniper]
Firewall Device [cmdb_ci_firewall_device]	Extends from	IP Firewall [cmdb_ci_ip_firewall]
	Contains::Contained by	Firewall Security Policy [cmdb_ci_firewall_security_policy]
Juniper Firewall Device [cmdb_ci_firewall_device_juniper]	Extends from	Firewall Device [cmdb_ci_firewall_device]
Firewall Device Group [cmdb_ci_firewall_device_group]	Extends from	CMDB CI [cmdb_ci]
	Members::Member Of	Firewall Device [cmdb_ci_firewall_device]
	Contains::Contained by	Firewall Security Policy [cmdb_ci_firewall_security_policy]
Firewall Manager [cmdb_ci_firewall_manager]	Extends from	CMDB CI [cmdb_ci]
	Manages::Managed by	Firewall Device [cmdb_ci_firewall_device]
	Contains::Contained by	Firewall Security Policy [cmdb_ci_firewall_security_policy]
Firewall Security Policy [cmdb_ci_firewall_security_policy]	Extends from	CMDB CI [cmdb_ci]