The Zero Networks App for CMDB application is purpose built to create "ServiceNow" groups for your asset in the Zero Networks platform.
The Zero Networks ServiceNow scoped application is purpose built to create "ServiceNow" groups for your devices in the Zero Network application and integration Change Requests for new Zero Networks rules.
The intent is to sync your Microsegmentation "Group" CI classes (such as business applications) and their "Member" CI classes (such as servers) to Zero Networks for use in Microsegmentation rules without double entry (e.g. managing relationships in ServiceNow cmdb_rel_ci and pulling it into Zero Networks.)
You can synchronize "environment" groups (e.g. production, development, test, etc) from ServiceNow as well. Ensure your CI "devices" have an environment and it will automatically be created in Zero Networks to support your microsegmentation by environment goals.
You can synchronize "grandchild" environments, e.g. load balancers based on their parent server's environment to ZeroNetworks from ServiceNow. Ensure your CI "grandchildren" have a parent with an environment string and a unique IP address and it will be automatically added to the environment in Zero Networks to support your microsegmentation by environment and IP goals.
You can also synchronize grandchild devices (e.g. VIPs) to their parent's group.
The app leverages flow designer and query sets, allowing you to configure multiple "groups" of queries including Zero Network "groups", "members", "grandchildren" as well as groups by environment.
The app has the ability to read / write from multiple Zero Network environments from a single ServiceNow environment, allowing you to further segregate your network segmentation activities amongst related but separate Zero Network environments.
This new version adds the ability to propose ServiceNow Change Requests for firewall rule changes, which when approved are automatically implemented through the Zero Networks application. These features utilize a catalog item, flow designer, change templates, and are configurable via system properties.
Version 3.1.1
- Creates a webhook to receive proposed firewall rules that, when approved, create a Change Request to document the changes to firewall rules and automates the firewall rule change via Zero Networks. Proposed firewall changes that are rejected in ServiceNow are sent to Zero Networks to close the proposed firewall change.
Version 3.0
- Multi environment system property made available
- Query sets now have an environment field to specify where they will be sent when multi environment is enabled
- New table to store environment and token pairs
- New preflight checks on flows and query sets when multi environment is enabled
No special plugins required. Standard CMDB and Platform Functionality
Read to CMDB_CI and CMDB_REL_CI is required.
Access to execute the Proposed Firewall Change API is required.
Active Zero Networks subscription for Microsegmentation.