A Modern, Agentless Approach to Complete Asset Management
Armis® is the first agentless, passive, enterprise-class security platform to address the new threat landscape of managed, unmanaged and IoT devices. It discovers every asset in your environment, analyzes device behavior to identify risks or attacks, and protects your critical business information and systems. Together, Armis and ServiceNow provide a unified asset management solution for any managed, unmanaged, IoT, medical, and manufacturing/OT device.
Continuous, Reliable Device Visibility
Having an asset inventory you can trust is a critical component for any IT or security team’s success. But with so many devices in your environment today, many of which traditional asset management and security products can’t even see, it’s hard to know what’s there--and what’s not.
When integrated with the ServiceNow CMDB, the Armis platform makes sure ServiceNow always has the latest details (hardware, installed operating system, and more) about every device in your environment. Armis continuously and passively monitors devices for additional information it can use to true-up details in your ServiceNow CMDB, giving you a complete and up-to-date asset inventory whenever you need it.
- ServiceNow Operational Technology (OT) Certified
- Identify and classify managed, unmanaged, OT and IoT devices passively in real-time, with no agent or scanning required
- Monitor device activity to true-up your CMDB with new device details
- Reduce or eliminate duplicate, erroneous, or stale CMDB device information
Version 2.0.7
Yokohama Compatability
The Service Graph Connector for Armis is now Updated for Yokohama compatability
This patch release contains the following fixes/enhancments:
- Fixed issue where Armis Site Maps were not being automatically created during the device import job.
- In conjunction with changes in the CMDB CI Class Models plugin, added a new transform mapping to IRE Criterion Attribute column on th OT Device [cmdb_ot_entity] table so support the latest related entry updates.
- Updated dependency on CMDB CI Class Models to v1.71.0 or higher
Version 2.0.1
This patch release contains the following fixes/enhancements:
- OS Classification now considers the OS Version from Armis in addition to the OS Name. This will result in more accurate OS Classification.
- Improved error logging for Armis Device Import, clarifying that the "Run as" user needs both the "import_admin" and "connection_admin" roles. This role requirement is also documented in the Installation Guide.
Version 2.0.0
Introduces significant updates to modernize the transformation of Armis devices into the CMDB using a new Data in Single Column import structure. This approach allows each Armis device to contain nested data within a single staging table row, eliminating the need to split devices across multiple rows. As a result, the import process is simplified, enabling the Robust Transform Engine to handle complete devices more efficiently.
The Data in Single Column structure also enhances the Armis Service Graph Connector by offering more dynamic import capabilities. Using extension points, customers can now easily import custom attributes without needing to modify out-of-the-box application files.
Version 1.5.0
New Features
Armis Classification Settings
- Class Mappings
- Updated the way the Service Graph Connector for Armis classifies Armis devices into the ServiceNow CMDB. This is now managed through a settings table (SG-Armis Classification Settings), which classifies Armis devices based on category and type, and maps those devices to a target CMDB class. This new structure allows customers to easily update default class mappings to better suit their needs without the need to make adjustments to the integration code.
- CI Naming Strategy
- Each classification setting is configured with selectable CI Naming Strategies, altering how Armis Device names appear in the CMDB.
- Default Strategies:
- Just Name
- Name @ MAC Address
- (Name || Model) @ MAC Address
- Additionally, custom naming strategies can be created to meet unique customer needs without modifying the out-of-the-box integration.
- Operating System Classification
- Each classification setting can be configured to allow the Armis operating system to dynamically adjust the target CMDB class.
Armis CMDB Form View
- Expanded the Armis CMDB View to all CMDB classes targeted by the integration to better showcase Armis data in the ServiceNow CMDB.
- Armis CMDB Form View Sections:
- Base Hardware Information
- Relationships
- OT Information
- Ownership & Maintenance Information
- Armis Additional Information
- IP Addresses
- Network Adapters
- Serial Numbers
- Sources [sys_object_source]
- Software Installed
- Key Values
- External Metadata
- Incidents
- Vulnerable Items
- Vulnerable Item Detections
New Columns on Armis Additional Information Table
- Armis Category
- Armis Type
SG-Armis Device Import Robust Transformer Mapping Cleanup
- Simplified the transform mappings within the Service Graph Connector by removing many of the previous RTE Mappings from the transformer. This aids in the maintenance of the integration and significantly reduces the number of CMDB column mappings.
- Replaced the Cleanse Hardware Model transform operation with the new Cleanse Hardware Model with Model Number transform operation.
Deprecated
- The following are now deprecated:
- [System Property] - x_armis_cmdb.concat_mac_address_classes: Replaced by OS Reclassification on Armis Classification Settings.
- [Script Include] - ArmisITTypeDictionary: Replaced by Armis Classification Settings CMDB Class Mappings.
- [Script Include] - ArmisTypeDictionary: Replaced by Armis Classification Settings CMDB Class Mappings.
- [Script Include] - ArmisTypeDictOverride: Replaced by Armis Classification Settings CMDB Class Mappings.
- [Robust Transform Engine Entity Cleanse Hardware Model Operation] - Cleanse Hardware Model - u_model,u_model (Deprecated) : Replaced by Cleanse Hardware Model with Model Number - u_manufacturer,u_model,u_target_class_data_cmdb_class
- IntegrationHub ETL (2.1.1 or higher)
- ISA Equipment Model
- CMDB CI Class Models (1.71.0 or higher)
- Integration Commons for CMDB (sn_cmdb_int_util) (2.12.0 or higher)
- ServiceNow IntegrationHub Action Template - Data Stream
- ITOM Licensing (com.snc.itom.license) plugin