Skip to content

Commit 688e597

Browse files
maxvpmaxvp
committed
Add ServiceNow partial
1 parent ffe1e98 commit 688e597

File tree

7 files changed

+186
-75
lines changed

7 files changed

+186
-75
lines changed

‎src/content/docs/cloudflare-one/applications/casb/casb-integrations/microsoft-365/admin-center-fedramp.mdx‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
pcx_content_type: reference
3+
title: Admin Center (FedRAMP)
4+
rss: file
5+
sidebar:
6+
order: 1
7+
---
8+
9+
import { Render } from "~/components";
10+
11+
<Render
12+
file="casb/microsoft/integrations/admin-center"
13+
params={{
14+
integrationName: "Admin Center (FedRAMP)",
15+
environmentName: "Microsoft 365 account",
16+
slugifiedName: "microsoft-365/admin-center-fedramp",
17+
}}
18+
/>

‎src/content/docs/cloudflare-one/applications/casb/casb-integrations/microsoft-365/onedrive-fedramp.mdx‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
pcx_content_type: reference
3+
title: OneDrive (FedRAMP)
4+
rss: file
5+
sidebar:
6+
order: 2
7+
---
8+
9+
import { Render } from "~/components";
10+
11+
<Render
12+
file="casb/microsoft/integrations/onedrive"
13+
params={{
14+
integrationName: "OneDrive (FedRAMP)",
15+
environmentName: "Microsoft 365 account",
16+
slugifiedName: "microsoft-365/onedrive-fedramp",
17+
}}
18+
/>

‎src/content/docs/cloudflare-one/applications/casb/casb-integrations/microsoft-365/outlook-fedramp.mdx‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
pcx_content_type: reference
3+
title: Outlook (FedRAMP)
4+
rss: file
5+
sidebar:
6+
order: 4
7+
---
8+
9+
import { Render } from "~/components";
10+
11+
<Render
12+
file="casb/microsoft/integrations/outlook"
13+
params={{
14+
integrationName: "Outlook (FedRAMP)",
15+
environmentName: "Microsoft 365 account",
16+
slugifiedName: "microsoft-365/outlook-fedramp",
17+
}}
18+
/>

‎src/content/docs/cloudflare-one/applications/casb/casb-integrations/microsoft-365/sharepoint-fedramp.mdx‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
pcx_content_type: reference
3+
title: SharePoint (FedRAMP)
4+
rss: file
5+
sidebar:
6+
order: 3
7+
---
8+
9+
import { Render } from "~/components";
10+
11+
<Render
12+
file="casb/microsoft/integrations/sharepoint"
13+
params={{
14+
integrationName: "SharePoint (FedRAMP)",
15+
environmentName: "Microsoft 365 account",
16+
slugifiedName: "microsoft-365/sharepoint-fedramp",
17+
}}
18+
/>

‎src/content/docs/cloudflare-one/applications/casb/casb-integrations/servicenow-fedramp.mdx‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
---
2+
pcx_content_type: reference
3+
title: ServiceNow (FedRAMP)
4+
rss: file
5+
---
6+
7+
import { Render } from "~/components";
8+
9+
<Render
10+
file="casb/servicenow-integration"
11+
params={{
12+
integrationName: "ServiceNow (FedRAMP)",
13+
environmentName: "ServiceNow (FedRAMP) instance",
14+
slugifiedName: "servicenow-fedramp",
15+
}}
16+
/>

‎src/content/docs/cloudflare-one/applications/casb/casb-integrations/servicenow.mdx‎

Lines changed: 6 additions & 75 deletions
Original file line numberDiff line numberDiff line change
@@ -7,79 +7,10 @@ rss: file
77
import { Render } from "~/components";
88

99
<Render
10-
file="casb/integration-description"
11-
params={{ integrationName: "ServiceNow", integrationAccountType: "ServiceNow instance" }}
10+
file="casb/servicenow-integration"
11+
params={{
12+
integrationName: "ServiceNow",
13+
environmentName: "ServiceNow instance",
14+
slugifiedName: "servicenow",
15+
}}
1216
/>
13-
14-
## Integration prerequisites
15-
16-
- `admin` access to a ServiceNow instance
17-
- Ability to [create an OAuth API endpoint for external clients](https://docs.servicenow.com/csh?topicname=t_CreateEndpointforExternalClients)
18-
19-
## Integration permissions
20-
21-
For the ServiceNow integration to function, Cloudflare CASB requires the following permissions:
22-
23-
- `Global` application scope
24-
25-
These permissions follow the principle of least privilege to ensure that only the minimum required access is granted. To learn more about each permission, refer to the [ServiceNow Application scope documentation](https://docs.servicenow.com/bundle/utah-application-development/page/build/applications/concept/c_GlobalScope.html).
26-
27-
## Security findings
28-
29-
<Render
30-
file="casb/security-findings"
31-
params={{ integrationName: "ServiceNow", slugRelativePath: "servicenow" }}
32-
/>
33-
34-
### Instance security
35-
36-
Identify security risks related to the ServiceNow instance itself.
37-
38-
| Finding type | FindingTypeID | Severity |
39-
| ---------------------------------------------------------------------- | -------------------------------------- | -------- |
40-
| ServiceNow: Production instance with exposed admin credentials | `6c75c56f-df42-454d-85ee-c919bba70191` | Critical |
41-
| ServiceNow: Production instance with exposed database user credentials | `37652a12-93d3-453f-961b-de32f419ed33` | High |
42-
| ServiceNow: Instance with exposed admin credentials | `8235e0a2-6a53-4596-adff-632203c60ab2` | High |
43-
| ServiceNow: Instance with exposed database user credentials | `4f8bf0e4-fa79-44fc-b171-84926cbc73c7` | Medium |
44-
45-
### User security
46-
47-
Flag user-related security risks and misconfigurations.
48-
49-
| Finding type | FindingTypeID | Severity |
50-
| ------------------------------------------------------------ | -------------------------------------- | -------- |
51-
| ServiceNow: User with pending password reset | `42097604-73db-46b3-9a5c-c3e0d2629531` | High |
52-
| ServiceNow: User with 3+ failed login attempts | `49079a4b-5280-4c9c-bf61-a45b53c2fd9f` | Medium |
53-
| ServiceNow: User with locked account | `344f5a37-7df5-4a26-a0fe-4d3c4215df61` | Low |
54-
| ServiceNow: User without multi-factor authentication enabled | `4efbe128-608d-4b19-b7c8-10c312e4cd9f` | Low |
55-
| ServiceNow: User with no assigned roles | `8b5ca10d-951c-46d8-b786-223756b39165` | Low |
56-
| ServiceNow: Inactive user | `a3ee8ec7-85de-480c-bd98-6bc9581bacf9` | Low |
57-
| ServiceNow: User with no recent activity | `2477faf4-1887-44bc-b663-94373afb03d7` | Low |
58-
59-
### Incident management
60-
61-
Identify issues related to ServiceNow incidents.
62-
63-
| Finding type | FindingTypeID | Severity |
64-
| -------------------------------------------------------- | -------------------------------------- | -------- |
65-
| ServiceNow: High priority incident with no assigned user | `8bd04e4e-4f2f-4b44-9c6c-df6341822521` | High |
66-
| ServiceNow: Incident with no assigned user | `0ea6e2dc-4748-436f-9407-bf24997ae574` | Medium |
67-
68-
### Knowledge management
69-
70-
Highlight potential misconfigurations in ServiceNow knowledge articles.
71-
72-
| Finding type | FindingTypeID | Severity |
73-
| ----------------------------------------------------- | -------------------------------------- | -------- |
74-
| ServiceNow: Knowledge article without expiration date | `0bd59519-a5ec-4327-92ec-c74f26184a5c` | Low |
75-
| ServiceNow: Knowledge article without any roles | `3caf029c-9840-43e4-a024-6d4af9f3d57e` | Low |
76-
| ServiceNow: Knowledge article with flagged status | `12bd46d5-e627-4bba-8644-59e01cca6646` | Low |
77-
78-
### Integration and access
79-
80-
Detect issues related to ServiceNow integrations and access controls.
81-
82-
| Finding type | FindingTypeID | Severity |
83-
| ---------------------------------------- | -------------------------------------- | -------- |
84-
| ServiceNow: Internal Integration user | `fa63799a-24ce-4f5f-8e88-09dbf87a6fb9` | Low |
85-
| ServiceNow: Web Service Access only user | `3523fbb4-8725-4ffc-b200-9aef44bbbe98` | Low |

‎src/content/partials/cloudflare-one/casb/servicenow-integration.mdx‎

Lines changed: 92 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,92 @@
1+
---
2+
params:
3+
- integrationName
4+
- environmentName
5+
- slugifiedName
6+
---
7+
8+
import { Render } from "~/components";
9+
10+
<Render
11+
file="casb/integration-description"
12+
params={{
13+
integrationName: props.integrationName,
14+
integrationAccountType: props.environmentName,
15+
}}
16+
/>
17+
18+
## Integration prerequisites
19+
20+
- `admin` access to a {props.environmentName}
21+
- Ability to [create an OAuth API endpoint for external clients](https://docs.servicenow.com/csh?topicname=t_CreateEndpointforExternalClients)
22+
23+
## Integration permissions
24+
25+
For the {props.integrationName} integration to function, Cloudflare CASB requires the following permissions:
26+
27+
- `Global` application scope
28+
29+
These permissions follow the principle of least privilege to ensure that only the minimum required access is granted. To learn more about each permission, refer to the [ServiceNow Application scope documentation](https://docs.servicenow.com/bundle/utah-application-development/page/build/applications/concept/c_GlobalScope.html).
30+
31+
## Security findings
32+
33+
<Render
34+
file="casb/security-findings"
35+
params={{
36+
integrationName: props.integrationName,
37+
slugRelativePath: props.slugifiedName,
38+
}}
39+
/>
40+
41+
### Instance security
42+
43+
Identify security risks related to the ServiceNow instance itself.
44+
45+
| Finding type | FindingTypeID | Severity |
46+
| ---------------------------------------------------------------------- | -------------------------------------- | -------- |
47+
| ServiceNow: Production instance with exposed admin credentials | `6c75c56f-df42-454d-85ee-c919bba70191` | Critical |
48+
| ServiceNow: Production instance with exposed database user credentials | `37652a12-93d3-453f-961b-de32f419ed33` | High |
49+
| ServiceNow: Instance with exposed admin credentials | `8235e0a2-6a53-4596-adff-632203c60ab2` | High |
50+
| ServiceNow: Instance with exposed database user credentials | `4f8bf0e4-fa79-44fc-b171-84926cbc73c7` | Medium |
51+
52+
### User security
53+
54+
Flag user-related security risks and misconfigurations.
55+
56+
| Finding type | FindingTypeID | Severity |
57+
| ------------------------------------------------------------ | -------------------------------------- | -------- |
58+
| ServiceNow: User with pending password reset | `42097604-73db-46b3-9a5c-c3e0d2629531` | High |
59+
| ServiceNow: User with 3+ failed login attempts | `49079a4b-5280-4c9c-bf61-a45b53c2fd9f` | Medium |
60+
| ServiceNow: User with locked account | `344f5a37-7df5-4a26-a0fe-4d3c4215df61` | Low |
61+
| ServiceNow: User without multi-factor authentication enabled | `4efbe128-608d-4b19-b7c8-10c312e4cd9f` | Low |
62+
| ServiceNow: User with no assigned roles | `8b5ca10d-951c-46d8-b786-223756b39165` | Low |
63+
| ServiceNow: Inactive user | `a3ee8ec7-85de-480c-bd98-6bc9581bacf9` | Low |
64+
| ServiceNow: User with no recent activity | `2477faf4-1887-44bc-b663-94373afb03d7` | Low |
65+
66+
### Incident management
67+
68+
Identify issues related to ServiceNow incidents.
69+
70+
| Finding type | FindingTypeID | Severity |
71+
| -------------------------------------------------------- | -------------------------------------- | -------- |
72+
| ServiceNow: High priority incident with no assigned user | `8bd04e4e-4f2f-4b44-9c6c-df6341822521` | High |
73+
| ServiceNow: Incident with no assigned user | `0ea6e2dc-4748-436f-9407-bf24997ae574` | Medium |
74+
75+
### Knowledge management
76+
77+
Highlight potential misconfigurations in ServiceNow knowledge articles.
78+
79+
| Finding type | FindingTypeID | Severity |
80+
| ----------------------------------------------------- | -------------------------------------- | -------- |
81+
| ServiceNow: Knowledge article without expiration date | `0bd59519-a5ec-4327-92ec-c74f26184a5c` | Low |
82+
| ServiceNow: Knowledge article without any roles | `3caf029c-9840-43e4-a024-6d4af9f3d57e` | Low |
83+
| ServiceNow: Knowledge article with flagged status | `12bd46d5-e627-4bba-8644-59e01cca6646` | Low |
84+
85+
### Integration and access
86+
87+
Detect issues related to ServiceNow integrations and access controls.
88+
89+
| Finding type | FindingTypeID | Severity |
90+
| ---------------------------------------- | -------------------------------------- | -------- |
91+
| ServiceNow: Internal Integration user | `fa63799a-24ce-4f5f-8e88-09dbf87a6fb9` | Low |
92+
| ServiceNow: Web Service Access only user | `3523fbb4-8725-4ffc-b200-9aef44bbbe98` | Low |

0 commit comments

Comments
 (0)