How to deny all external REST API calls?

[romanm5]

I have a requirements to allow interactive user logon to ServiceNow from external network but need to deny all REST API calls.  

"REST API Access Policy plugin" is not very well documented. The solution with adding filters doesn't work.

Can you help?

[Harish V]

@Randheer Singh ,

How to you create policies for APIs that does not require authentication? I am unable to find a way to restrict scripted REST APIs that with "requires authentication=false"

[Randheer Singh]

API access policies can not be applied to public APIs. You may want to check if you can add IP restrictions through the ACL (With the Script) associated with the scripted REST API.