Because the Edge Encryption proxy server resides in your network, it may be subject to vulnerability scans by your network software. To prevent IP scanner or other requests from being forwarded to your ServiceNow instance, you can blacklist IP addresses, IP ranges, or network masks. Any connection to the proxy server from a blacklisted address is terminated and is not forwarded to your instance.

1. Navigate to Edge Encryption Configuration > Maintenance > Blacklist IP Addresses.
   The Encryption Proxy IP Blacklists [edge_encryption_ip_blacklist] list view opens.
2. Click New.
3. Complete the form.

   Field	Description
   Proxy server	The Edge Encryption proxy server that is prevented from forwarding requests from blacklisted addresses.
   IP, IP range, or net-mask	Requests from this IP address, range, or network mask are not forwarded to your ServiceNow instance. Example values include: IP address: 10.10.10.5 IP range: 10.10.10.1-15 Network mask: 10.10.10.0/24
   Active	Whether the record is active. Only IP addresses from active records are prevented from sending requests to the instance.
   Description	Description of the blacklist record.

4. Click Submit.
5. Repeat these steps for all other proxies for which an IP address should be blacklisted.