Rest api access policy IP Filter

[Dheeraj Pology]

I have disabled authentication for Scripted REST API and I want to restrict its access to specific IP or Range. I tried IP Filter criteria in API Access Policy but it's not working. How to properly configure the IP Filter?

[Ravi Chandra_K]

Hello @Dheeraj Pology 

Have you tried Adaptive Authentication?

Please refer:

https://docs.servicenow.com/bundle/washingtondc-platform-security/page/administer/login/task/t_Acces...

https://docs.servicenow.com/bundle/washingtondc-platform-security/page/integrate/authentication/conc...

Please mark the answer as helpful and correct if helped.

Kind Regards,

Ravi Chandra 

[Dheeraj Pology]

Hi @Ravi Chandra_K 

I see IP Address Access Control is used for Instance traffic. Not for any specific API Resource.

[Randheer Singh]

Hi @Dheeraj Pology 
API access policy does not work for public APIs. If you have selected "requires authentication" as false for the scripted REST API, the REST API access policy will not work for the API.

Thanks,

Randheer