Skip to content
Access control › Hardening settings › Platform Security
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Restrict access to specific IP ranges plugin

Use the com.snc.ipauthenticator plugin to restrict access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to their assigned IP net blocks.

The com.snc.ipauthenticator plugin, when set to true, restricts access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to their assigned IP net blocks.

Ensure that the com.snc.ipauthenticator plugin is activated and there is at least one active IP access policy in the IP Address Access Controls [ip_access] table.

More information

AttributeDescription
Configuration name
  • com.snc.ipauthenticator
  • IP Address Access Controls [ip_access]
Configuration type- Plugin \(/v\_plugin\_list.do\) - Table record \(/ip\_access\_list.do\)
Data typeN/A
Recommended value
  • The com.snc.ipauthenticator plugin is active.
  • The IP Address Access Controls [ip_access] table contains at least one active record.
Default value
  • The com.snc.ipauthenticator plugin is active by default.
  • The IP Address Access Controls [ip_access] table contains no records by default.
Fallback value
  • The com.snc.ipauthenticator plugin is active by default.
  • The IP Address Access Controls [ip_access] table contains no records by default.
CategoryAccess control
Security risk- Severity score: 5.3 - CVSS rating: Medium - Security risk details: Allowing unrestricted public access to a ServiceNow instance without properly configuring the IP Address Access Control plugin exposes the system to unauthorized access and potential exploitation from any IP address, undermining network-level security and increasing the attack surface.
Functional impactNone
Dependencies and prerequisites

This plugin when set to true restricts access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to their assigned IP net blocks. An exclusion list (Deny) or an inclusion list (Allow) of IP addresses can be created through IP Address Access Control (ip_access_list.do).

Before setting this property, you must activate the IP Range Based Authentication (com.snc.ipauthenticator)com.snc.ipauthenticator plugin. To learn more, see IP range based authentication and in the Steps to configure section (below).

Ensure the plugin com.snc.ipauthenticator is activated and there is at least one active IP access policy in the table ip_access.

Parent Topic:Access control