Table of contents

• Overview
• Release Notes
• Requirements
• How to install this application
• Technical Documentation
• Design Diagram
• Licensing
• Contributing
• Issues

---

Overview

This repository holds the IBM Guardium Data Protection ServiceNow module code for integration with ServiceNow Vulnerability Response module. This code will synchronize CMDB and VA data between ServiceNow and IBM Guardium providing centralized management of vulnerability data in ServiceNow.

Requirements

IBM Guardium

• IBM Guardium 11.5 + Patch 525. You can also use 11.4 + Patch 441 (available in August 2022), Patch 460 will add CVSS Attack Vector. Patch 525 contains several performance fixes.
• IBM Guardium user with Guardium vulnerability-access role (or Guardium admin role)
• (Optional) Add vulnerability-access role to all existing Guardium data sources to permit the ServiceNow plug-in the ability to update and delete existing data sources which result from changes to ServiceNow CMDB

ServiceNow

• Tested on ServiceNow releases: Rome, San Diego, Tokyo, Utah
• ServiceNow Vulnerability Response module
• ServiceNow Vulnerability Response Integration with NVD module
• ServiceNow Configuration Compliance module (optional)

Install This Application

• Be sure to install Vulnerabilty Reponse module first!
• You can install this application in one of three ways:
  1. From ServiceNow Store as a certified app
  2. Import from source control (this entire github project)
  3. Update Set: follow instructions in Installation and Test document

Technical Documentation

• Read-me for installation and testing instructions
• Troubleshooting
• Read-me for developers
• Read-me for technical design documentation

Design

Licensing

Project License

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Issues

• List of all open and closed issues
• If you wish to do a full synchronization of data, you can delete all Integrations Runs then click Execute Now and the data for this integration will be fully synchronized. Otherwise, the integration does a partial synchronization based on the date of the last successful Integration Run.