Improve visibility and agility– Infoblox DDI Now Integrates with ServiceNow CMDB [ Edited ]

[#1]

We are excited to announce that Infoblox has integrated with ServiceNow IT Service and Operations Management solutions (ITSM, ITOM) to help customers receive information on new devices and infected hosts in one place, thus allowing them to quickly respond to the network changes and security events.

Today’s enterprise network consists of a large number of network and security devices and each device generates its own set of events but there is a lack of easy and timely access to these events to take the right action. Also, these network and security devices don’t always share information, resulting in network and security tools working in silos with no context. ServiceNow is used by many organizations for the smooth management of business-critical applications and allows customers to visualize the impact of the actions and help in better decision making. If customers can see all the devices and security events in single place, they can proactively identify network changes and security events and hence, make a better decision. That’s where Infoblox comes into the picture. To allow network and security admins to see device and security events in a single place, Infoblox, the market leader in DNS, DHCP and IPAM (DDI), has integrated with ServiceNow Configuration Management and Database (CMDB) and incident management.

As shown in the figure above, Infoblox sends information on new devices, networks, IP addresses to ServiceNow and create new incidents using Outbound Notifications. Network and security admin can now view these devices, incidents, and Indicators of Compromise (IoCs) that were discovered by Infoblox in ServiceNow UI as shown in the figure below.

 

Customers can also see details of the security events that were detected by Infoblox in ServiceNow portal as shown in the figure below.

 

Thus, the main benefit of the integration is visibility into new devices and infected hosts in a single place that helps network and security admins to quickly respond to network changes and security events.  

Customers need Infoblox Ecosystem license for this integration. To receive network information from Infoblox, they need DDI license and to receive threat information, they need RPZ and Threat Intelligence licenses. This integration was built by Infoblox and is supported by Infoblox community.

To know more about this integration and demo, please check out the demo video below.

[#2]

Good Morning,  I only want to collect CMDB information from Infoblox at this point.  We currently send threat information to our SIM system.  To do this, would I only need the DDI license to receive network information from Infoblox, they need DDI license?  Thank you