Skip to tutorial content
Rate module Not yet rated

Why Agent-Based Discovery Exists

4 min read
On this page

In this lesson, you will learn:

  • Where agentless discovery can’t reach
  • What an agent does instead
  • Why SNWR’s Finance zone needs agents

πŸ” Quick look back: Last time: Fixing Cloud Discovery Errors. You learned how the missing AWS permission was found and fixed.

1 The Problem: The Finance Zone Blocks Every Scan

SNWR’s Finance zone allows no inbound connections. A MID Server can’t log in to snwr-fin-01. So:

  • Six servers stay invisible.
  • Finance data sits on servers nobody tracks.

🎯 The problem: The Finance zone blocks every scan.

πŸ‘‰ The fix: Use an agent on each server that sends data out, instead of a scan coming in.

Compare agentless and agent.
Figure 1. Agentless vs agent-based discovery.

2 Where agents help

  • Zero-trust zones with no inbound traffic.
  • Laptops and hosts that are often offline.
  • Places where sharing credentials isn’t allowed.

3 What an agent is

Key term: Agent Client Collector (ACC)

ServiceNow’s agent. It runs on the host and sends data to a MID Server or cloud service.

Key term: ACC for Visibility

The ACC setup used for discovery data.

4 Project Clear View: How We Implemented It

πŸ“ Situation: Farah wouldn’t allow inbound scans into Finance.

🧭 Decision: Plan ACC for the six Finance servers, as DD-D02 says.

πŸ› οΈ Steps we took:

  1. Explained agents to Farah and Priya.
  2. Agreed ACC for snwr-fin-01 to 06.
  3. Kept the rest of SNWR agentless.
  4. Added ACC tasks to the plan for week 8.

βœ… What we verified:

  • Farah approved the approach.
  • ACC work is scheduled.

πŸ“ Evidence: ACC plan, linked to DD-D02.

5 Quick recap

  • Agentless discovery needs inbound access and credentials.
  • Agents connect out instead.
  • Agents suit zero-trust zones and offline hosts.
  • SNWR uses ACC for the Finance zone only.

6 Check yourself

Think of your answer first. Then tap to check.

1 Why can’t SNWR scan the Finance zone? Show answer

It allows no inbound connections.

2 Which way does an agent connect? Show answer

Out, from the host.

3 How many SNWR servers use ACC? Show answer

Six.

Nice work! You know why agents exist. πŸŽ‰
Next up: ACC Architecture: Agent β†’ MID Server β†’ ServiceNow

Was this lesson helpful?

Have a question or doubt?

Ask here and get help from instructors and fellow learners.

0 / 300

Only logged-in learners can post.