Integrating ServiceNow with Forescout Cloud

By integrating ServiceNow with Forescout Cloud, you can more seamlessly synchronize your data between both systems bi-directionally. This means that case statuses and comments can be synchronized between both systems, streamlining your case management workflows.

To integrate ServiceNow (for Standard Incident and SIR) with Forescout Cloud:

  1. Set up ServiceNow API key
  2. Create new ServiceNow user
  3. Edit the role of the new user
  4. Enable read access to the sys_journal_fields table
  5. Set up timezone and date time format
  6. Set up ACL
  7. Add ServiceNow integration to Forescout Cloud
  8. Review Configuration Options and Auto-Synchronization (optional)
  9. Configure the ServiceNow Webhook Integration
  10. Configure ServiceNow SIR integration field mapping

Configure multiple instances of ServiceNow

You can add multiple Case Management integrations for each incident type to choose instances where external cases needed to be created as part of the bi-directional integrations.

The current implementation of Case Management integration only allows one case type as default for any of the incident types (i.e., Security Incident, Health Incident, or Risk Mitigation). If you have multiple case management systems, this will be a problem, as you will have to manually handle incidents in the correct instance.

By creating multiple instances of external case management integrations, you can get a more granular level of case updates and streamline your case management in one place.

See Add ServiceNow integration to Forescout Cloud for steps to add integrations.