Rule 2 - Mapping of Defender for Endpoint Asset Types to ServiceNow CMDB CI Classes

Rule Synopsis

These are the rule/s that determine the target CMDB CI Tables/Classes used by CI Sync for each MS Defender for Endpoint Asset Type.

The target CI Table/CI Class is used by CI Sync for two purposes:

To search for an existing CIs during a CI Update Operation.
To write new CIs during a CI Insert Operation.

Rule Details and Default

The default rule/s are described by the mapping table shown below.

Defender for Endpoint Asset Type	CI Sync Target CI Classes
Apple Macs	cmdb_ci_computer
Windows PCs	cmdb_ci_computer
Windows Servers	cmdb_ci_win_server

Override Options

Context

Customers may consider changing these mappings to target different CMDB CI Tables/Classes shown above. This can often be required when existing CIs are already present in the CMDB (in Classes different to those shown below) and CI Sync is expected to correlate to the existing CIs.

Options

The target CI Class can be amended per Asset Type.
The target Related List/Child Record table can be amended per Asset Type.

Overriding via Connection Settings

N/A

Additional Information

N/A

Rule 1 – Enable CI Sync’s Cross-Class Matching Feature

Support Model for Rule Overrides

Question: Can overrides be performed by customers without a Syncfish Extended Implementation and Support Plan?

Answer: No (a plan is needed - see below)

Question: Which Syncfish Extended Implementation and Support Plan is required to obtain overrides of this rule

Answer: Either a Silver Plan or Gold Plan