Cisco Security and ServiceNow

ServiceNow offers everything-as-a-service cloud computing, including platform-as-a-service (PaaS) enterprise service management software for human resources, law, facilities management, finance, marketing, and field operations. ServiceNow specializes in IT Service Management (ITSM), IT Operations Management (ITOM) and IT Business Management (ITBM) applications and provides forms-based workflow application development.

Product Integrations

Panoptica: The integration with ServiceNow allows to Panopitca end use to open a ticket via ServiceNow to solve the required finding and connect it to the relevant point of contact in the organization.

Cisco Identity Services Engine: This Cisco built integration allows the Cisco ISE platform to use information from ServiceNow's CMDB to update endpoint records within ISE. This allows customers to make network access control decisions based on assets in ServiceNow’s CMDB.

Secure Endpoint: Cisco Security Endpoint application is used to create new incidents in ServiceNow ITSM and then properly group them according to criteria, enabling users to have Incidents automatically created in ServiceNow for malicious events generated by Cisco Security Endpoint.

SecureX Threat Response: ServiceNow Security Operations (Security Incident Response and Threat Intelligence) can leverage the Verdicts, Sightings, and Response capabilities provided by Cisco SecureX Threat Response to assist the security analyst in their investigation workflow. ServiceNow is a module for Cisco SecureX Threat Response, allowing it to be a data source when a user starts an investigation in the UI or queries the API. ServiceNow ITSM & SecureX orchestration workflows and atomic actions for workflows - ServiceNow: CVE Hunt to ServiceNow Incident, ServiceNow: Add WorkNote To Incident & ServiceNow: Create Incident.

Kenna: ServiceNow Ticketing is one of the most popular ticketing systems in the industry. Kenna ensures that it’s easy for tickets to be sent to the remediation teams directly through our platform.

Oort: You can easily integrate Oort and ServiceNow to easily receive notifications in your ServiceNow instance and create tickets from Oort.

• Receive identity threat notifications in ServiceNow
• Create tickets from specific failed checks
• Create custom tickets about specific users
• See bidirectional updates for ServiceNow back into Oort