Creating a New Catalog Item in ServiceNow

Ivanti has no control over third-party software or content and is not responsible for the availability, security, or operation, of any third-party software. If you encounter issues while setting up your integration, please contact Ivanti Support.

Before integrating ServiceNow with Application Control, create a new catalog item for Application Control in ServiceNow using the following requirements. Additional variables and an altered workflow can be configured as appropriate.

In this section:

Create a New Application Control Catalog Item

  1. Type Catalog in the filter and search for Maintain Items. When clicked that will bring up the existing catalog items that come installed by default.

  2. Click New.

  3. Complete the Name and other fields as required, for example:


  4. Click Submit, then go back into the newly created item.

  5. Scroll down to the variables tab. Click New.

  6. Create a New variable, Single Line Text item for each of the following:

    • Question: Application / Name: Application

    • Question: User Name / Name: User_Name

    • Question: Computer Name / Name: ComputerName (from release 2022.3)

    • Question: Hash / Name: Hash

    • Question: Vendor / Name: Vendor

    • Question: Reason / Name: Reason

    • Question: Description / Name: Description

    • Question: Version / Name: Version

      • These values are case sensitive. Please enter values as they appear above.

  7. Create a New variable, Select Box item for each of the following. Under each New select box item add the Question choices options (once the select box has been created you can save time by save via the 3 lines icon, this will refresh the variable page with question options ):

    • Question: Resource Type / Name: Resource_Type – Click 3 Lines icon, save.

      • Text & Value: Application – Click submit

      • Text & Value: Windows Component


    • Question: Action / Name: Action

      • Text & Value: Allow

      • Text & Value: Allow and Elevate

      • Text & Value: Allow and Elevate (Excluding Child Processes)

    • Question: Windows Component / Name: Component

      • Add Hardware

      • Automatic Updates/Windows Updates

      • Backup and Restore Center

      • BitLocker Disable/Suspend

      • BitLocker Enable/Resume

      • Calibrate Color

      • Certificate Manager

      • Clear Type Text

      • Component Services

      • Computer Management

      • Data Sources

      • Date and Time

      • Default Location

      • Defragment

      • Desktop DPI

      • Device Manager

      • Disk Management

      • Display

      • Ease of Access Center

      • Easy Transfer

      • Event Viewer

      • Explorer - Advanced Security, Change Permissions

      • Explorer - Advanced Sharing

      • Explorer - Check Drive for Errors

      • Explorer - Security, Edit Users or Groups

      • Explorer - Show Quota Settings

      • Indexing Options - Advanced Indexing Options

      • Indexing Options - Pause Indexing

      • Indexing Options - Show All Locations

      • Install/Uninstall Languages

      • Internet Options

      • iSCSI Initiator

      • Local Security Policy

      • Network Connections - Advanced Sharing Settings

      • Network Connections - Local Area Connection Properties

      • Network Connections - Manage Local Area Connection (Disable/Delete/Rename/Bridge)

      • Network Connections - Manage Wireless Profile

      • Network Connections - Wireless Network Properties, Copy Profile to USB Flash Drive

      • Network Connections - Wireless Network Properties, Show Characters

      • Offline Files

      • Performance Monitor

      • Power Options

      • Printers

      • Problem Reporting

      • Programs and Features - Uninstall an Update

      • Programs and Features - Uninstall or Change a Program

      • Recovery Disc

      • Recovery Restore

      • Regional Options

      • Server Manager

      • Services

      • System

      • System Configuration

      • Task Scheduler

      • Troubleshoot

      • Trusted Platform

      • User Accounts - Manage User Accounts

      • User Accounts - User Account Control Settings

      • Windows Defender

      • Windows Features

      • Windows Firewall Advanced Settings

      • Windows Firewall Settings - Action Center

      • Windows Firewall Settings - Control Panel

    • Question: Duration / Name: Duration

      • Text & Value: One Hour

      • Text & Value: Four Hours

      • Text & Value: One Day

      • Text & Value: Two Days

      • Text & Value: One Week

      • Text & Value: Two Weeks

      • Text & Value: One Month

      • Text & Value: Indefinitely

Make sure to Save all of the options.

Creating a ServiceNow Workflow

In this example, the workflow allows anything signed by Microsoft. This is to show what can be done in workflows, it may not be what is required in all situations. Please modify the workflow according to business requirements.

Steps

Type workflow into the Search and click Workflow Editor, then New Workflow.

Call it something suitable (Name: AC Workflow), Table: Request Item [sc_req_item] – Click Submit

Add the required workflow elements from the Core tab (right corner)

  • Utilities > X= Set Value

    • Name: Set Values to open

    • Values: State - Open

  • Conditions > If

    • Name: Signed by Microsoft

    • Conditions: Variables – Application Control Catalog – Vendor – Starts with - Microsoft

  • Approvals > Approval – User

    • Name: Manager Approval

    • Stage: Waiting for Approval

    • Approvers: Users – System Administrator

    • Condition for approval:

      • Wait for: Anyone to approve

      • When anyone rejects: Reject the approval

      • Approval column: approval

      • Approval Journal column: approval_history

  • Utilities > X= Set Value

    • Name: Approved

    • Stage: Complete

    • Values:

      • Approval – Approved

      • State – Closed Complete

  • Utilities > X= Set Value

    • Name: Set Rejected

    • Stage: Complete

    • Values:

      • Approval – Rejected

      • State – Closed Complete

Connect the workflow activities as follows:

When finished, in the top left corner of the dialog, click the 3 lines icon. Click Publish.

Updating the Application Control Catalog Item

Return to the Application Control catalog item and under the Process Engine tab > Workflow select AC Workflow. The Flow and Execution plan should be empty.

Follow these steps:

  • In the Portal Settings tab > Request method, set to Request.

  • Select Hide for all the other options.

  • Publish the catalog item by clicking Edit in Catalog Builder (top right).

  • Click the Review and Submit tab on the left-hand side. Click Submit.

  • State will now change to Published.

ServiceNow Instance Warning

The developer ServiceNow instances go into Hibernation overnight, so you’ll need to log back in each morning to trigger the instance to reawaken.