question Rest api access policy IP Filter in Developer forum

Rest api access policy IP Filter

Dheeraj Pology — Sat, 13 Apr 2024 01:46:20 GMT

I have disabled authentication for Scripted REST API and I want to restrict its access to specific IP or Range. I tried IP Filter criteria in API Access Policy but it's not working. How to properly configure the IP Filter?

Re: Rest api access policy IP Filter

Ravi Chandra_K — Sat, 13 Apr 2024 03:38:36 GMT

Hello @Dheeraj Pology

Have you tried Adaptive Authentication?

Please refer:

https://docs.servicenow.com/bundle/washingtondc-platform-security/page/administer/login/task/t_AccessControl.html

https://docs.servicenow.com/bundle/washingtondc-platform-security/page/integrate/authentication/concept/adaptive-authentication.html

Please mark the answer as helpful and correct if helped.

Kind Regards,

Ravi Chandra

Re: Rest api access policy IP Filter

Randheer Singh — Sat, 13 Apr 2024 03:42:16 GMT

Hi @Dheeraj Pology
API access policy does not work for public APIs. If you have selected "requires authentication" as false for the scripted REST API, the REST API access policy will not work for the API.

Thanks,

Randheer

Re: Rest api access policy IP Filter

Dheeraj Pology — Sat, 13 Apr 2024 04:00:16 GMT

Hi @Ravi Chandra_K

I see IP Address Access Control is used for Instance traffic. Not for any specific API Resource.