---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/servicenow-platform

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Restricting access

# Restricting access to Hermes {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Restrict access to Hermes by IP address.

You can filter client access to the Hermes cluster using the IP Address Access Control module. When IP address filtering is enabled, the system only blocks an IP address if a matching Deny rule exists and no matching Allow rule exists. By default, there
are no restrictions on access to your instance.

To enable IP address filtering in the Hermes cluster, you must submit a request to Customer Service and Support.

For details on configuring access rules in the IP Address Access Control module, see [IP address access control](https://www.servicenow.com/docs/access?context=t_AccessControl&version=australia&pubname=australia-platform-security&ft:locale=en-US).
* **[Create an alert for unauthorized access](https://www.servicenow.com/docs/nWq2UD4oPeiD_bG5kUHCFg)**   
  Receive a notification when an attempt to access Hermes is received from an unauthorized IP address.

**Related concepts**   

* [Activating the Hermes Messaging Service](https://www.servicenow.com/docs/Wn0WmZBuS78D4YUGjqucLQ "The Hermes Messaging Service is enabled when the Glide Hermes Message Queue plugin (com.glide.hermes) is activated.")  
**Related tasks**   

* [Set up a secure connection to the Hermes Messaging Service](https://www.servicenow.com/docs/Mw~3jpA8CErRU~xiSqp_nA "Secure your Kafka topics by generating a ServiceNow instance-signed certificate.")
* [Revoke a Hermes certificate](https://www.servicenow.com/docs/f146dyZmUbqRITNEGVRODQ "Revoke a ServiceNow instance-signed certificate so that it can't be used in secure connections to the Hermes Messaging Service.")
* [Enable encryption at rest for a Hermes topic](https://www.servicenow.com/docs/BGBMfpWmzbeqOgBecM6xlw "Enable encryption at rest on a Hermes topic to help protect message data stored on broker disks from unauthorized access.")

