---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Baseline version 6.0

# New hardening settings for baseline version 6.0 {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
New hardening settings have been released with Security Center baseline version 6.0.

* [Enforce application specific ACLs only for application data](https://www.servicenow.com/docs/ftZOwKOjC1jrRJ_v3ruT3g "Avoid unauthorized or undesired access to application data by enforcing application-specific access control lists (ACLs) only for application data.")
* [Disable legacy JQuery UI usage](https://www.servicenow.com/docs/GMRZu2oBqPrKCRlEZxD4QA "Avoid the introduction of unpatched vulnerabilities in the library by disabling legacy JQuery UI usage.")
* [Display recommendations for high risk UI pages](https://www.servicenow.com/docs/uxmfAdtJNSfhdSuBjoSQkQ "Decrease the likelihood of authorization errors, and unintended information disclosure by displaying recommendations for high risk UI pages.")
* [Enforce current password policy compliance requirements on login](https://www.servicenow.com/docs/MIRCuvJgz3ZJx6ajBqTGgw "Reduce the risk of brute force account login by enforcing current password policy compliance requirements on login.")
* [Prevent Users From Accepting Warning To Bypass CSRF Validation \[Updated in Security Center 1.3 and 1.5\]](BnLmdW5gKkgLFJ8CANfjfg "Use the glide.security.csrf.strict.validation.mode property to enable CSRF token strict validation. If the CSRF token doesn't match, it prevents resubmission of the request.")
* [Require Minimum and Maximum Password Length](https://www.servicenow.com/docs/NjwYwDd3aakcjTIJXQtbiQ "Set minimum and maximum password lengths to avoid compliance issues and reduce the risk of a successful brute force attack")
* [Limit session length for high assurance sessions](https://www.servicenow.com/docs/Hmuyr0aTGzjWmmHWX58s_w "Reduce the risk of account takeover in high assurance sessions by limiting session length")
* [Disable deprecated TLS versions](https://www.servicenow.com/docs/lO0WeJUPTi73LADWU~NKKg "Avoid loss or leakage of sensitive data by disabling deprecated TLS versions.")
* [Disable local login for users with Single Sign-On (SSO) enabled](https://www.servicenow.com/docs/U7eFgFZnw8muL82x8JfAPQ "Update user records to disable local login for users with Single Sign-On (SSO) enabled.")
* [Reduce allowed bypasses for multifactor setup](https://www.servicenow.com/docs/WpXBFstJBWOr2KN72Z~iBQ "Decrease the window of time an account is at risk of compromise by reducing allowed bypasses for multifactor setup.")
* [Prevent impersonating user from viewing application data](https://www.servicenow.com/docs/y~L5Bh8HbtLDc3~NiATiAw "Use system properties to prevent an impersonating user from viewing application data.")
* [Prevent verbose HTTP request logging](https://www.servicenow.com/docs/4W~ScJfsvZPP9mq5f4QuJw "Help prevent access to sensitive information by reducing verbose HTTP request logging.")
* [Enable relay state in SAML requests to prevent replay attacks](https://www.servicenow.com/docs/fUNcB3x80qtbd9CVcCYYMg "Reduce the risk of replay attacks by enabling relay state in SAML requests to help prevent replay attacks.")
* [Minimize failed login attempts for high assurance sessions](https://www.servicenow.com/docs/x2_Vu7Krpef8DFpb5BISgg "Decrease the likelihood of a brute force attack by minimizing failed login attempts for high assurance sessions.")
* [Apply continuous authentication policies to mobile sessions](https://www.servicenow.com/docs/EFfDvp6EZUwygpLTgR9~EA "Reduce the risk of session hijacking by applying continuous authentication policies to mobile sessions.")
* [Disable use of TripleDES/3DES encryption algorithm](https://www.servicenow.com/docs/Y15VrJ8L~EIp~9~0RajsSg "Avoid the security risks of outdated encryption methods by disabling the use of the TripleDES/3DES encryption algorithm.")
{#new-hardening-settings-for-baseline-six__ul_f4q_lgv_bfc}