---
sourceDocument: Zurich Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-security

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict access to specific IP ranges plugin \[Updated in Security Center 1.3\]

# Restrict access to specific IP ranges plugin \[Updated in Security Center 1.3\] {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use the com.snc.ipauthenticator plugin to restrict access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to their assigned IP net
blocks.

## Prerequisites {#sc-restrict-access-to-specific-ip-ranges-plugin__section_msm_4zy_jlb}

This plugin when set to true restricts access to specific IP ranges. Unless public
access is intended for the instance, administrators should limit access to their
assigned IP net blocks. An exclusion list (Deny) or an inclusion list (Allow) of IP
addresses can be created through IP Address Access Control (ip_access_list.do).

Before setting this property, you must activate the IP Range Based Authentication (com.snc.ipauthenticator)com.snc.ipauthenticator plugin. To learn more, see [IP range based authentication](https://www.servicenow.com/docs/FKB_G7uqvfNtQ4rmcK1Qqw "One way to secure a web-based application is to restrict access based on the IP address.") and in the Steps to configure section (below).

Ensure the plugin com.snc.ipauthenticator is activated and there is
at least one active IP access policy in the table ip_access.

## More information {#sc-restrict-access-to-specific-ip-ranges-plugin__section_more_information}

{#sc-restrict-access-to-specific-ip-ranges-plugin__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Plugin Name | * com.snc.ipauthenticator * ip_access {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_gsk_5c5_32c} |
| Configuration type | System Security \> IP Address Access Control |
| Category | [Access control](https://www.servicenow.com/docs/JtKgQWAhh8NqOL0ilKCKoA "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Purpose | To add the range of IP address that can or can't access the instance to the trusted and untrusted domain lists. |
| Recommended value | Active |
| Default value | None. This is a plugin, not a Glide property; therefore, there is no default value. |
| Security risk rating | 5.3 |
| Functional impact | Customer-denied IP ranges are used for this remediation item. No impact as customer defines the target list. |
| Security risk | (Low) Unnecessary exposure to the target instance on the internet should be restricted with the help of IP access controls functionality. |
| References | [IP range based authentication](https://www.servicenow.com/docs/FKB_G7uqvfNtQ4rmcK1Qqw "One way to secure a web-based application is to restrict access based on the IP address.") |
[ ]

{#sc-restrict-access-to-specific-ip-ranges-plugin__table_ajc_b43_3kb}

## Steps to configure {#sc-restrict-access-to-specific-ip-ranges-plugin__section_steps_to_configure}

1. Ensure that the com.snc.ipauthenticator plugin is active.
2. Navigate to System SecurityIP Address Access Control.
3. Click New to create an exclusion list (Deny) or an inclusion list (Allow) of IP addresses.
4. Click Submit.
{#sc-restrict-access-to-specific-ip-ranges-plugin__ol_rkd_mk3_nkb}

*[\>]: and then