Home

Table of contents

• Overview
• Release Notes
• Requirements
• How to install this application
• Technical Documentation
• Design Diagram
• Licensing
• Contributing
• Known Issues

---

Overview

This repository holds the IBM Guardium Data Protection ServiceNow module code for integration with ServiceNow Vulnerability Response module. This code will synchronize CMDB and VA data between ServiceNow and IBM Guardium providing centralized management of vulnerability data in ServiceNow.

Requirements

IBM Guardium

• IBM Guardium version 12.x, 11.5 + Patch 525, or 11.4 + Patch 441 (available in August 2022).
  • Patch v11.4-460 (or greater) adds ability to query the Central Manager for version information.
  • Patch v11.5-525 (or greater) contains several performance fixes.
• IBM Guardium "service" user with Guardium vulnerability-access role (or Guardium admin role) so that the ServiceNow app can use the Guardium REST-API to import data
• (Optional) Apply vulnerability-access role to all existing Guardium data sources to permit the ServiceNow app the ability to update and delete existing data sources which result from changes to ServiceNow CMDB

ServiceNow

• Tested on ServiceNow releases: Rome, San Diego, Tokyo, Utah, Vancouver
• ServiceNow Vulnerability Response module
• (Optional) ServiceNow Vulnerability Response Integration with NVD module
• (Optional) ServiceNow Configuration Compliance module

Install This Application

• Be sure to install Vulnerabilty Reponse module first!
• You can install this application in one of three ways:
  1. From ServiceNow Store as a certified app
  2. Import from source control (this entire github project)
  3. Update Set: follow instructions in Installation and Test document

Technical Documentation

• Read-me for installation and testing instructions
• Read-me for developers
• Read-me for technical design documentation

Design

Licensing

Project License

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.