Skip to tutorial content
Rate module Not yet rated

ACC Architecture: Agent → MID Server → ServiceNow

4 min read
On this page

In this lesson, you will learn:

  • The parts of ACC
  • How data flows
  • The MID-less option

🔁 Quick look back: Last time: Why Agent-Based Discovery Exists. You learned why agents suit places a MID Server can’t reach.

1 The Problem: Farah Asks Where Agent Data Goes

Before approving agents, Farah asks:

  • ‘What does the agent connect to?’
  • ‘Is the connection encrypted?’
  • ‘How does data reach the CMDB?’

🎯 The problem: Farah needs to know exactly where agent data goes.

👉 The fix: Show her the ACC architecture from agent to CMDB.

Flow from agent to CMDB.
Figure 1. How ACC data reaches the CMDB at SNWR.

2 The parts

  • The agent on each host collects data on a schedule.
  • It keeps a secure outbound connection to a MID Server.
  • The MID Server passes data to the instance.
  • Data goes through IRE like any other source.

ACC is based on the open-source Sensu Go agent.

3 The MID-less option

On newer releases, agents can connect straight to ServiceNow’s cloud services, without a MID Server. It needs outbound internet access from the hosts.

📝 Note: SNWR’s Finance zone has no internet access, so it uses the MID Server path.

4 Project Clear View: How We Implemented It

📍 Situation: Farah asked where agent data goes.

🧭 Decision: Walk her through the architecture before install.

🛠️ Steps we took:

  1. Showed the path: agent, TLS link, Mumbai MID cluster, IRE, CMDB.
  2. Confirmed the only new rule is outbound from Finance to the MID cluster.
  3. Explained why SNWR doesn’t use MID-less.
  4. Farah approved.

✅ What we verified:

  • Farah signed the ACC architecture.
  • The port matrix has the one Finance row.

📁 Evidence: ACC architecture note, attached to DD-D02.

5 Quick recap

  • The agent collects data and connects out to a MID Server.
  • The link is encrypted.
  • Data goes through IRE.
  • MID-less ACC connects straight to ServiceNow’s cloud services.

6 Check yourself

Think of your answer first. Then tap to check.

1 What does an ACC agent connect to at SNWR? Show answer

The Mumbai MID Server cluster.

2 Does agent data skip IRE? Show answer

No. It goes through IRE like any other source.

3 Why doesn’t SNWR use MID-less ACC? Show answer

The Finance zone has no internet access.

Nice work! You know how ACC data flows. 🎉
Next up: When to Choose ACC Instead of Agentless Discovery

Was this lesson helpful?

Have a question or doubt?

Ask here and get help from instructors and fellow learners.

0 / 300

Only logged-in learners can post.