--- title: Firewall extension classes description: The CMDB CI Class Models app adds or updates classes for firewall devices. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/servicenow-platform/cmdb-ci-class-models/cmdb-ci-class-models-fw.html release: australia product: CMDB CI Class Models classification: cmdb-ci-class-models topic_type: concept last_updated: "2026-03-12" reading_time_minutes: 4 breadcrumb: [CMDB CI class models, Configuration Management Database \(CMDB\), Configuration Management, Extend ServiceNow AI Platform capabilities] --- # Firewall extension classes The CMDB CI Class Models app adds or updates classes for firewall devices. CMDB CI Class Models is a ServiceNow Store app that adds class models that extend the CMDB class hierarchy. The new or updated classes include class descriptions, identification rules, identifier entries, and, if applicable, dependent relationships. You can use the added classes just like any other CMDB class. Applications such as Discovery and Service Mapping Patterns can use the class extensions to populate CIs and discover technologies and software. See the release notes for all CMDB CI class models. ## Request apps on the Store Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html). ## Firewalls A firewall is a network security system that, based on security policies, monitors and controls incoming and outgoing network traffic. Firewalls typically form a barrier between an internal network and an untrusted external network such as the internet. It usually consists of security policies that help secure an organization from external threats and cyberattacks. Firewall vendors might provide a centralized firewall manager to manage many firewall devices and the security policies residing on them. For example, Panoramaâ„¢ is the centralized management system for Palo Alto Networks firewalls. \[Omitted image "cmdb-ci-class-model-fw-palo-alto-cisco.png"\] Alt text: Firewall extension classes integrated with the CMDB class hierarchy. \[Omitted image "cmdb\_ci\_class\_model\_fw.png"\] Alt text: Firewall extension classes integrated with the CMDB class hierarchy. ## Classes This section lists the classes that the CMDB CI Class Models app adds or updates.See the class columns table for further details about the columns added for each class. CMDB CI Class Models: Release 1.10.0 adds or updates the following classes for the discovery of network firewall devices. For the list of classes in the base system, including classes that this app might extend, see [CMDB tables descriptions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/servicenow-platform/configuration-management-database-cmdb/cmdb-tables-details.md).
| Class | Extends | Description |
|---|---|---|
| IP Firewall \[cmdb\_ci\_ip\_firewall\] | NETGEAR \[cmdb\_ci\_netgear\] | Contains all network firewalls. |
| Firewall Device \[cmdb\_ci\_firewall\_device\] | IP Firewall \[cmdb\_ci\_ip\_firewall\] | Network security system that monitors and controls incoming and outgoing network traffic, based on security policies. |
| Fortinet Firewall Device \[cmdb\_ci\_firewall\_device\_fortinet\] | Firewall Device \[cmdb\_ci\_firewall\_device\] | Fortinet firewall device. |
| Fortinet Firewall Interface \[cmdb\_ci\_fortinet\_firewall\_interface\] | Network Interface \[cmdb\_ci\_ni\_interface\] | Discovered by the Next Generation Fortinet Network Firewall - REST pattern. See [Fortinet firewall and FortiGate VDOM REST-based discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/it-operations-management/fortinet-fw-vdoms-rest-discovery.md). |
| Fortinet Firewall Policy \[cmdb\_ci\_fortinet\_firewall\_policy\] | Firewall Security Policy \[cmdb\_ci\_firewall\_sec\_policy\] | Discovered by the Next Generation Fortinet Network Firewall - REST pattern. See [Fortinet firewall and FortiGate VDOM REST-based discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/it-operations-management/fortinet-fw-vdoms-rest-discovery.md). |
| Fortinet Virtual Domain \[cmdb\_ci\_fortinet\_vdom\] | IP Firewall \[cmdb\_ci\_ip\_firewall\] | Discovered by the Next Generation Fortinet Network Firewall - REST pattern. See [Fortinet firewall and FortiGate VDOM REST-based discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/it-operations-management/fortinet-fw-vdoms-rest-discovery.md). |
| Juniper Firewall Device \[cmdb\_ci\_firewall\_device\_juniper\] | Firewall Device \[cmdb\_ci\_firewall\_device\] | Juniper firewall device. |
| Firewall Device Group \[cmdb\_ci\_firewall\_device\_group\] | CMDB CI \[cmdb\_ci\] | Group of firewall devices. |
| Panorama Firewall Device Group \[cmdb\_ci\_firewall\_device\_group\_panorama\] | Firewall Device Group \[cmdb\_ci\_firewall\_device\_group\] | Group of Panorama firewall devices. |
| Palo Alto Firewall Device \[cmdb\_ci\_firewall\_device\_palo\_alto\] | Firewall Device \[cmdb\_ci\_firewall\_device\] | Palo Alto firewall device. |
| Firewall Cluster \[cmdb\_ci\_firewall\_cluster\] | \[cmdb\_ci\_cluster\] | Group of firewall nodes that work as a single logical entity. |
| Fortinet Firewall Cluster \[cmdb\_ci\_firewall\_cluster\_fortinet\] | Firewall Cluster \[cmdb\_ci\_firewall\_cluster\] | Fortinet firewall cluster. |
| Juniper Firewall Cluster \[cmdb\_ci\_firewall\_cluster\_juniper\] | Firewall Cluster \[cmdb\_ci\_firewall\_cluster\] | Juniper firewall cluster. |
| Firewall Manager \[cmdb\_ci\_firewall\_manager\] | CMDB CI \[cmdb\_ci\] | System that provides centralized management for many firewall devices and the security policies residing on them. |
| Panorama Firewall Manager \[cmdb\_ci\_firewall\_manager\_panorama\] | Firewall Manager \[cmdb\_ci\_firewall\_manager\] | The centralized network security management tool for Palo Alto Networks firewalls. |
| Firewall Security Policy \[cmdb\_ci\_firewall\_sec\_policy\] | CMDB CI \[cmdb\_ci\] | The security policy that the firewall device enforces. |
| Panorama Firewall Security Policy \[cmdb\_ci\_firewall\_sec\_policy\_panorama\] | Firewall Security Policy \[cmdb\_ci\_firewall\_sec\_policy\] | The security policy that the Panorama firewall device enforces. |