Tanium and ServiceNow Service Graph Connector program integration

Now, most of the workforce is no longer in the office, but starts at home. The endpoints are no longer on the company network, but connected to the Wi-Fi network in people’s homes, so having an accurate endpoint list is more important than ever. . . However, using old tools that provide old data and do not interact with external endpoints is a major challenge.

I have seen in many organizations that cyber security teams actively respond to (for example) malware outbreaks, they conduct forensic research and help operations teams restore vulnerable systems. A common problem faced by these teams is performing these tasks without an accurate configuration management database (CMDB) inventory. Use various tools to update continuously, which eventually leads to inaccurate data. The operations team will then work hard to manage credentials and keep firewall ports open to retrieve this data. When trying to identify potential incidents or vulnerabilities without reliable evidence, they often have to guess.

But don’t be sad! Fortunately, there is good news in this regard. That is, there is now a seamless integration between Tanium and ServiceNow.

ServiceNow Service Graph is a next-generation system for digital products and services, focusing on the entire technology stack from the infrastructure to the application layer. It contains ServiceNow CMDB, which is the repository for all information about infrastructure, relationship, and configuration management. Service Graph provides IT organizations with a solid data foundation that can be used to manage the entire life cycle of digital products and services. In addition, it supports all ServiceNow products, allowing customers to integrate technical components, people, and processes under a service-oriented vision. In this way, customers can use their existing CMDB investments to rationalize investment portfolios, automate development, simplify cloud and security operations, manage risks and understand ROI, thereby providing high-quality business results.

In addition, with Tanium, organizations can map and manage thousands of endpoints, or even more than one million endpoints, in almost real-time locations, no matter where they are, without having to manage credentials and firewalls. ServiceNow’s digital workflow can drive business growth, increase flexibility and increase employee productivity. By integrating these technologies, customers can supplement their ServiceNow service graphs and CMDBs in near real-time and keep them up to date with Tanium’s managed endpoints. In this way, the typical problems of unreliable and outdated CMDB have become a thing of the past, and you can get current reliable information.

As part of the Service Graph Connector Program (a new name in the Technology Partner Program), our latest update to the ServiceNow Paris version includes the certified service graph connector in the ServiceNow App Store, which has the following advantages:

It uses ServiceNow’s new powerful conversion engine (RTE) function. The engine is standard, with multiple conversion APIs that are used in integration to help provide consistent data to ServiceNow Service Graph and CMDB.

RTE continues to benefit from the identification and reconciliation engine (IRE) and works with IRE in the system to achieve better synchronization. In addition, the service graph connector utilizes a new multi-source engine to simplify and automate data management and data visibility.

It can help customers use IntegrationHub ETL to better customize the mapping according to their own environment.

The good news is not only for IT security teams, but also for IT operations. With the CMDB with the latest and complete Tanium endpoint data, they can now access the best of both worlds. This (not redundant) luxury is not only evident from the reports of (outstanding) analysts, they have always insisted on having an in-depth understanding of systems and processes. Thanks to the pandemic and the fact that people are doing more work in the office again, the development of society ensures that insight into the endpoint is more important than ever.

Author: Vice President Wytze Rijkmans Tanium area