Contents Now Platform Administration Previous Topic Next Topic Platform security Subscribe Log in to subscribe to topics and get notified when content changes. ... SAVE AS PDF Selected Topic Topic & Subtopics All Topics in Contents Share Platform security Security is built into all levels of the system. Implement the security features that are appropriate for your organization, from managing failed logins and encrypted password protection, to access control rules and audit logs. Feature Description Status Top Tasks High Security Settings High Security Settings refer to several security options available in your instance. Active Request High Security Settings activation Certificates Your instance requires certificates to establish secure connections and validate signatures. Requires configuration before use Active Upload a certificate to an instance Login and authentication security Configure login security options to control access to your instance. Active Define login scenarios Make UI pages public or private Web service security Enforce security using basic authentication, mutual authentication, or WS-Security. Active Setting up mutual authentication WS-Security Access control list rules Rules for access control lists (ACLs) restrict access to data by requiring users to pass a set of requirements before they can interact with it. Active Create an ACL rule Contextual Security Manager HTML sanitizer Remove unwanted code and protect against security concerns such as cross-site scripting attacks by sanitizing HTML markup in HTML fields and translated HTML fields. Active Enable HTML sanitizer Configure HTML sanitizer Auditing Track record changes on auditing-enabled tables. By default, the system tracks changes to the incident, change, and problem tables, among others. Active Enable auditing for a table History sets Domain separation With domain separation you can separate data, processes, and administrative tasks into logically defined domains. Requires a separate subscription. Request domain separation Domain separation setup and basic administration Domain separation in Encryption Support Domain separation in Edge Encryption Virtual Private Network (VPN) Use a virtual private network (VPN) to integrate your instance with external data sources over the Internet. Available by request from ServiceNow personnel. Virtual Private Network (VPN) Request a VPN service Encryption support Use encryption contexts to allow or deny access to sensitive data based on user role. Requires configuration before use. Active Set up encryption contexts Domain separation in Encryption Support Encrypt and decrypt MID Server attributes Edge Encryption ServiceNow® Edge Encryption™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest. Requires a separate subscription. Edge encryption installation Edge Encryption configuration Domain separation in Edge Encryption System logs View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine. Active Transaction logs Event logs Antivirus Scanning Use Antivirus Scanning to help protect your instance against virus infections that can be introduced by file attachments to your system records, such as incidents, problems, and stories. Active On this page Send Feedback Previous Topic Next Topic
Platform security Security is built into all levels of the system. Implement the security features that are appropriate for your organization, from managing failed logins and encrypted password protection, to access control rules and audit logs. Feature Description Status Top Tasks High Security Settings High Security Settings refer to several security options available in your instance. Active Request High Security Settings activation Certificates Your instance requires certificates to establish secure connections and validate signatures. Requires configuration before use Active Upload a certificate to an instance Login and authentication security Configure login security options to control access to your instance. Active Define login scenarios Make UI pages public or private Web service security Enforce security using basic authentication, mutual authentication, or WS-Security. Active Setting up mutual authentication WS-Security Access control list rules Rules for access control lists (ACLs) restrict access to data by requiring users to pass a set of requirements before they can interact with it. Active Create an ACL rule Contextual Security Manager HTML sanitizer Remove unwanted code and protect against security concerns such as cross-site scripting attacks by sanitizing HTML markup in HTML fields and translated HTML fields. Active Enable HTML sanitizer Configure HTML sanitizer Auditing Track record changes on auditing-enabled tables. By default, the system tracks changes to the incident, change, and problem tables, among others. Active Enable auditing for a table History sets Domain separation With domain separation you can separate data, processes, and administrative tasks into logically defined domains. Requires a separate subscription. Request domain separation Domain separation setup and basic administration Domain separation in Encryption Support Domain separation in Edge Encryption Virtual Private Network (VPN) Use a virtual private network (VPN) to integrate your instance with external data sources over the Internet. Available by request from ServiceNow personnel. Virtual Private Network (VPN) Request a VPN service Encryption support Use encryption contexts to allow or deny access to sensitive data based on user role. Requires configuration before use. Active Set up encryption contexts Domain separation in Encryption Support Encrypt and decrypt MID Server attributes Edge Encryption ServiceNow® Edge Encryption™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest. Requires a separate subscription. Edge encryption installation Edge Encryption configuration Domain separation in Edge Encryption System logs View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine. Active Transaction logs Event logs Antivirus Scanning Use Antivirus Scanning to help protect your instance against virus infections that can be introduced by file attachments to your system records, such as incidents, problems, and stories. Active
Platform security Security is built into all levels of the system. Implement the security features that are appropriate for your organization, from managing failed logins and encrypted password protection, to access control rules and audit logs. Feature Description Status Top Tasks High Security Settings High Security Settings refer to several security options available in your instance. Active Request High Security Settings activation Certificates Your instance requires certificates to establish secure connections and validate signatures. Requires configuration before use Active Upload a certificate to an instance Login and authentication security Configure login security options to control access to your instance. Active Define login scenarios Make UI pages public or private Web service security Enforce security using basic authentication, mutual authentication, or WS-Security. Active Setting up mutual authentication WS-Security Access control list rules Rules for access control lists (ACLs) restrict access to data by requiring users to pass a set of requirements before they can interact with it. Active Create an ACL rule Contextual Security Manager HTML sanitizer Remove unwanted code and protect against security concerns such as cross-site scripting attacks by sanitizing HTML markup in HTML fields and translated HTML fields. Active Enable HTML sanitizer Configure HTML sanitizer Auditing Track record changes on auditing-enabled tables. By default, the system tracks changes to the incident, change, and problem tables, among others. Active Enable auditing for a table History sets Domain separation With domain separation you can separate data, processes, and administrative tasks into logically defined domains. Requires a separate subscription. Request domain separation Domain separation setup and basic administration Domain separation in Encryption Support Domain separation in Edge Encryption Virtual Private Network (VPN) Use a virtual private network (VPN) to integrate your instance with external data sources over the Internet. Available by request from ServiceNow personnel. Virtual Private Network (VPN) Request a VPN service Encryption support Use encryption contexts to allow or deny access to sensitive data based on user role. Requires configuration before use. Active Set up encryption contexts Domain separation in Encryption Support Encrypt and decrypt MID Server attributes Edge Encryption ServiceNow® Edge Encryption™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest. Requires a separate subscription. Edge encryption installation Edge Encryption configuration Domain separation in Edge Encryption System logs View warnings and errors for instance processes, records, and non-critical events, such as memory usage on the server machine. Active Transaction logs Event logs Antivirus Scanning Use Antivirus Scanning to help protect your instance against virus infections that can be introduced by file attachments to your system records, such as incidents, problems, and stories. Active
