Is it possible to whitelist domains in ServiceNow instead of IP addresses?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-27-2021 05:22 AM
Hi All,
Need your expertise inputs on the below:
we have Cloud based application which needs to be integrated with servicenow (to make REST calls for creating incidents) and cloud app IP dynamically changes.
we have IP restrictions on our instance, no matter which IP addresses we whitelist, the integration will stop working when the app servers IP addresses change.
Is it possible to whitelist domains in ServiceNow instead of IP addresses? if whitelist for domain is not supported, any alternative approach we can take?
Thanks in advance.
Santosh
- Labels:
-
Reference Architecture

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-30-2021 04:47 AM
I'm not aware of a possibility in SN to whitelist using domains. If those IP addresses are not within a predictable IP range, perhaps you could consider running your trafic from the cloud app to ServiceNow via a proxy server? Then you could just whitelist the proxy IP.
I'm not an expert on network setup though so perhaps SMEs can chime in...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-30-2021 07:22 AM

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-30-2021 07:29 AM
Not sure how that behaves with IP Access Control turned on. But I suppose it can be tested quite quickly 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-30-2021 04:45 PM
Hi Harshal,Tom,
Thnks for taking your time in providing inputs on this.
As IP Access control in turned on, it will take precedence over CORS rule. we did tried by configuring the domain and REST api in cors tbl which dint work with record having in ip access control tbl.
As Tom suggested, will need to check if we SN can get the requests from source through proxy ip, i doubt network team will agree , will need to check with them on this approach.
will keep you posted if any leads on this.
Thnks again,
Santosh