---
sourceDocument: Brazil API Reference
sourceDocumentLink: https://www.servicenow.com/docs/r/api-reference

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Create IP filter criteria

# Create IP filter criteria {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Define which IP addresses or IP ranges are permitted to connect to your ServiceNow instance via the Live Connect ODBC/JDBC driver.

## Before you begin

* Consult your network team to identify the IP address range for your ODBC or JDBC client machines. You may need to use the external IP address rather than the internal IP address, depending on your network configuration.
* Complete the configuration steps:
  * [Assign roles and create service accounts](https://www.servicenow.com/docs/OeVVm_YzwcmpA~0WkmxP~Q "Assign the sn_odbc_rest_access or sn_jdbc_rest_access role to users who need Live Connect access. You can assign these roles to personal user accounts or create dedicated non-interactive (Machine) service accounts.")
  * [Create Access Control Lists (ACLs) for Live Connect](https://www.servicenow.com/docs/RccH9EnymKjl61FHlrUuyA "Grant user accounts query access to specific ServiceNow tables through Live Connect using table-level ACLs.")
  {#create-ip-filter-criteria__ul_en1_q4h_hkc}

Role required: admin

## About this task

By default, all incoming IP addresses are blocked for Live Connect connections. To allow access only from trusted client machines, configure the Authentication Policy with an IP filter and policy condition.  
Note:  
For additional details on IP filtering, see [IP Filter](https://www.servicenow.com/docs/access?context=ip-filter&version=brazil&pubname=brazil-platform-security&ft:locale=en-US) in the ServiceNow Platform Security guide.

## Procedure

1. Navigate to AllAdaptive AuthenticationAuthentication PoliciesAll Policies.
2. Search for Live Connect Authentication Policy and open it.
3. From the Policy Inputs tab, select New.  
   A dialog appears prompting you to select a policy input type.
   If the dialog does not appear, verify that you selected New from the Policy Inputs tab and not from another section of the form.
4. Select IP Filter Criteria.
5. On the IP Filter Criteria form, enter the following information:  
   * Name: Enter a name to identify this IP filter group (for example, AllowedIPRange).
   * Description: Enter a description (for example, Allowed IP addresses for ODBC/JDBC connections).
6. From the IP Range tab, double-select the Start IP column to insert a new row.  
   Enter the IP address range for ODBC/JDBC client machines that are allowed to connect:
   * Start IP: Enter the starting IP address of the range.
   * End IP: Enter the ending IP address of the range. For a single IP address, enter the same value in both Start IP and End IP.
   * Description: Enter a description.

   The IP addresses you enter are the outbound IP addresses, not the internal IP addresses. Your IT team can provide this information. These are the machines from which BI tools and analytics platforms will connect to ServiceNow.
7. Select Submit.  
   The page returns to the Live Connect Authentication Policy form. If the page does not return to the Live Connect Authentication Policy form, check that all required fields are filled in and resubmit.
8. Select the Policy Conditions tab and select New.
9. On the Condition form, enter the following information:  
   * Label: Enter a label to identify this policy condition (for example, AllowedIPs).
   * Description: Enter a description of this policy condition (for example, Allowed IPs for ODBC).
10. In the Condition section, select Add Filter Condition.  
    * From the first drop-down list, select the name of the IP filter criteria you created earlier.
    * From the second drop-down list, select is.
    * From the third drop-down list, select true
    {#create-ip-filter-criteria__ul_kbq_syh_hkc}
11. Select Submit.  
    The condition appears in the Policy Conditions list on the Live Connect Authentication Policy form. If the condition does not appear in the list, verify that all fields in the Condition form are filled in correctly and resubmit.
{#create-ip-filter-criteria__steps_elg_453_43c}

## Result

You have successfully configured IP filtering for Live Connect access. Your ServiceNow instance accepts Live Connect connections only from the specified IP addresses or IP ranges. All other connection attempts are blocked by default.

Your user account can connect to ServiceNow via ODBC or JDBC from the permitted client machines.

*[\>]: and then