Hiding Stats.do from Unauthenticated Users

[Community Alums]

Does anyone know how to disable the stats.do page from being visible by unauthenticated users?

Currently as an unauthenticated user I am able to hit the https://instancename.service-now.com/stats.do page 

[Community Alums · Accepted solution]

My Account team actual provide a solution.  Thought I would pass along here.

Take a look at this:  Restrict performance monitoring access (servicenow.com)

Use the glide.security.diag_txns_acl property to control stats.do, threads.do, thread_pool_stats, and replication.do access from an unauthenticated connection.

When you set this property to true, the glide.security.diag_txns_acl property only allows access to the following by the administrator account:

• https://<instancename>.servicenow.com/stats.do

[Markus B]

Does anyone know how to restrict this not only to users who have admin access, but to another group of users who shall not have the admin role, as they work as operators with limited access to the system?

[Soukayna]

did u find the answer please

[Markus B]

No