You can create ITSM connectors for ServiceNow, Slack, and Webhook.
- Go to Fabric View > Fabric > Connectors, and click Create New.
- Under ITSM, click ServiceNow Connector, Slack Connector, or Generic Connector and click Next.
- Configure the following options, and click OK:
Type a name for the fabric connector.
(Optional) Type a description for the fabric connector.
For Slack connectors and Generic connectors, you can also select HTTP.
Specify the port FortiAnalyzer uses to communicate with the external platform.
For Slack connectors and Generic connectors, you can also select PUT.
Type a title for the fabric connector.
Type the URL of the external platform.
Using ServiceNow as an example, copy and paste the URL from ServiceNow API URL in the Connection to ServiceNow API section in ServiceNow > FortiAnalyzer System Properties.
Enable HTTP Authentication
Set HTTP authentication to ON or OFF.
If set to ON, select Basic or OAuth2 authentication type.
Using ServiceNow with Basic authenictation as an example, enter the username and password from the Connection to ServiceNow API section in ServiceNow > FortiAnalyzer System Properties.
Using Webhook Connector with OAuth2 authentication as an example, enter the URL of the token service as well as the client ID and client secret for authentication.
Toggle ON to enable the fabric connector. Toggle OFF to disable the fabric connector.
After a ServiceNow connector is created, playbooks configured in FortiSoC can use the connector to post incident change notices. See Playbooks.
- Go to Fabric View > Fabric > Connectors.
- Right-click an ITSM connector, and select Edit.
The Edit Connectors dialog box is displayed.
- Edit the settings, and click OK.