---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict access to specific IP ranges plugin

# Restrict access to specific IP ranges plugin {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the com.snc.ipauthenticator plugin to restrict access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to their assigned IP net
blocks.
The com.snc.ipauthenticator plugin, when set to true, restricts access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to
their assigned IP net blocks.

Ensure that the com.snc.ipauthenticator plugin is activated and there is at least one active IP access policy in the IP Address Access Controls \[ip_access\] table.

## More information {#sc-restrict-access-to-specific-ip-ranges-plugin__section_wc1_cqn_phc}

{#sc-restrict-access-to-specific-ip-ranges-plugin__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | * com.snc.ipauthenticator * IP Address Access Controls \[ip_access\] {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_rlr_v1j_p3c} |
| Configuration type | * Plugin (/v_plugin_list.do) * Table record (/ip_access_list.do) {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_h2s_1bj_p3c} |
| Data type | N/A |
| Recommended value | * The com.snc.ipauthenticator plugin is active. * The IP Address Access Controls \[ip_access\] table contains at least one active record. {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_tm2_gbj_p3c} |
| Default value | * The com.snc.ipauthenticator plugin is active by default. * The IP Address Access Controls \[ip_access\] table contains no records by default. {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_gnq_qbj_p3c} |
| Fallback value | * The com.snc.ipauthenticator plugin is active by default. * The IP Address Access Controls \[ip_access\] table contains no records by default. {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_hkm_nbj_p3c} |
| Category | [Access control](https://www.servicenow.com/docs/x7vcJqvJ0dwOasc9M2~48A "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 5.3 * CVSS rating: Medium * Security risk details: Allowing unrestricted public access to a ServiceNow instance without properly configuring the IP Address Access Control plugin exposes the system to unauthorized access and potential exploitation from any IP address, undermining network-level security and increasing the attack surface. {#sc-restrict-access-to-specific-ip-ranges-plugin__ul_g1g_3sf_xwb} |
| Functional impact | None |
| Dependencies and prerequisites | This plugin when set to true restricts access to specific IP ranges. Unless public access is intended for the instance, administrators should limit access to their assigned IP net blocks. An exclusion list (Deny) or an inclusion list (Allow) of IP addresses can be created through IP Address Access Control (ip_access_list.do). Before setting this property, you must activate the IP Range Based Authentication (com.snc.ipauthenticator)com.snc.ipauthenticator plugin. To learn more, see [IP range based authentication](https://www.servicenow.com/docs/3bWTlxI02aRHw2qV2VKwUg "One way to secure a web-based application is to restrict access based on the IP address.") and in the Steps to configure section (below). Ensure the plugin com.snc.ipauthenticator is activated and there is at least one active IP access policy in the table ip_access. |
[ ]

{#sc-restrict-access-to-specific-ip-ranges-plugin__table_ajc_b43_3kb}