question Re: How to block specific IP address from accessing servicenow instance? in SecOps forum

How to block specific IP address from accessing servicenow instance?

Community Alums — Sun, 10 Jul 2022 03:09:17 GMT

Hi All,

I have a requirement, where I need to block a few specific IP addresses from accessing ServiceNow instance. I am not getting what exact steps I need to follow to configure this functionality. Could anyone help with this.

Thanks in advance.

Regards,

Ganesh

Re: How to block specific IP address from accessing servicenow instance?

Maik Skoddow — Sun, 10 Jul 2022 03:29:34 GMT

you can use the IP address access control feature. See https://docs.servicenow.com/en-US/bundle/sandiego-platform-administration/page/administer/login/task/t_AccessControl.html for more information.

Kind regards
Maik

Re: How to block specific IP address from accessing servicenow instance?

Community Alums — Mon, 11 Jul 2022 09:28:38 GMT

Hello @Maik Skoddow

Thank you for your reply. Is there any way like blocking one IP address, instead of IP ranges?

Regards,

Ganesh

Re: How to block specific IP address from accessing servicenow instance?

Maik Skoddow — Mon, 11 Jul 2022 10:26:22 GMT

Yes, of course. Just enter the same IP address for range start and range end.

I did it many times and it works perfectly.

Maik

Re: How to block specific IP address from accessing servicenow instance?

Community Alums — Mon, 11 Jul 2022 12:31:33 GMT

@Maik Skoddow :

Please do confirm, If i want to block IP address 1.1.1.1 then I have to add this IP address to both IP range start and IP range end right?

Regards,

Ganesh

Re: How to block specific IP address from accessing servicenow instance?

Maik Skoddow — Mon, 11 Jul 2022 12:56:18 GMT

yes, that's the way it works.

But make sure that in a first rule you allow everything else. In the worst case you are not able to log in anymore 😉

Maik

Re: How to block specific IP address from accessing servicenow instance?

Community Alums — Mon, 11 Jul 2022 13:11:09 GMT

@Maik Skoddow :

Actually we have around 200 specific IP address. I need to add in the block list. As you suggested, I will check for allowing any IP address.

One more Question: Do we need to create any Deny rule before blocking IP addresses?

Regards,

Ganesh