Error Reference

IP access control: your IP address is not allowed

IP access control: your IP address is not allowed

Where this appears

This error appears in the browser when attempting to access a ServiceNow instance, typically displayed as a system error page or login screen message. It occurs during initial connection attempts before authentication and is logged in the System Log under Security entries.

Sourdough
Chrome Extension

Debugging this in a real instance?

Sourdough lets you trace "IP access control: your IP address is not allowed" through system logs, script errors, and API health in the ServiceNow tab you are already using.

Add to Chrome

Free to install. Pro $5/month after a 14-day no-card trial.
Pro requires the ServiceNow admin role. Upgrade inside the extension.

Overview
Tasks
CMDB
API
Metrics
Monitor
Internals
Instance:sourdoughdev·Version:Yokohama
Instance StateONLINE
System StatusFully Operational
Session Timeout90 minutes
Logged-In Sessions2 (20 active)
Build Nameyokohama-12-18-2024_p1
IP Address10.159.128.43
Instance HealthHealth Score: 90%
🔥 5dSourdough (Chrome Plugin)Dark Mode

Cause

Your current IP address or network range is not included in the instance's IP Access Control List (ACL) configuration. (high likelihood)

Recent VPN connection changes have altered your public IP address to one outside the approved IP ranges. (high likelihood)

Network infrastructure changes such as datacenter migrations, ISP changes, or new proxy servers have changed your originating IP address. (medium likelihood)

IP Access Control is enabled but no IP ranges have been properly configured, blocking all access except from localhost. (medium likelihood)

ServiceNow is incorrectly detecting your IP address due to proxy headers or load balancer configuration issues. (low likelihood)

Fix

Step 1: Identify your current public IP address by visiting whatismyipaddress.com or using the command 'curl ifconfig.me' from your terminal.

Step 2: Contact your ServiceNow administrator to check if IP Access Control is enabled by navigating to System Security > IP Address Access Control in the instance.

Step 3: Have the administrator review the IP Access Control table (sys_ip_access_control) to verify if your IP address or CIDR range is listed and active.

Step 4: If your IP is missing, request the administrator to add a new IP Access Control rule with your current IP address or appropriate CIDR range (e.g., 192.168.1.0/24).

Step 5: Verify the new rule is active by checking the 'Active' checkbox and ensuring the 'Type' field is set to 'Allow' in the IP Access Control record.

Step 6: Clear your browser cache and cookies for the ServiceNow instance, then attempt to access the instance again after the rule is saved.

Step 7: If the error persists, check the System Log at System Diagnostics > Logs > System Log for additional IP access control entries that may provide more specific error details.

Step 8: As a temporary workaround, administrators can disable IP Access Control by setting the system property 'glide.security.use_ip_access_control' to false, though this reduces security.

Test Your Knowledge

Quick 3-question quiz. See how your ServiceNow skills stack up.

Question 1 of 3Performance

A list view on a table with millions of records is slow. Best fix?

Select an answer to continue