For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Deena's avatar
Deena
Icon for Altocumulus rankAltocumulus
Mar 06, 2024

Intergrating Service Now

Hi All, we recently received a request from our Service Now team to allow Service Now Discovery and Service Mapping to BigIP. The request is for SSH access to tmsh. This poses a security risk as we r...
application delivery
security
servicenow
Deena's avatar
Deena
Icon for Altocumulus rankAltocumulus
Mar 26, 2024

Thank you for the suggestions.

I have found that the ServiceNow discovery uses the following APIs:

  • https://" get_attr {"managementIP"}"/mgmt/tm/sys/global-settings
  • https://" get_attr {"managementIP"}"/mgmt/tm/sys/hardware
  • https://"get_attr {"managementIP"}"/mgmt/tm/sys/failover
  • https://"get_attr {"managementIP"}"/mgmt/tm/cloud/net/self
  • https://"get_attr {"managementIP"}"/mgmt/tm/net/interface
  • https://"get_attr {"managementIP"}"/mgmt/tm/net/self
  • https://"get_attr {"managementIP"}"/mgmt/tm/net/vlan
  • https://"get_attr {"managementIP"}"/mgmt/tm/ltm/pool
  • https://"get_attr {"managementIP"}"/mgmt/tm/gtm/wideip
  • https://"get_attr {"managementIP"}"/mgmt/tm/cm/traffic-group/
  • https://"get_attr {"managementIP"}"/mgmt/tm/cm/device

Based on those APIs, what would be the minimum Role that should be defined for ServiceNow? Would the role of Manager, be adequate?