---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Custom Firewall Rules

# Specify custom rules in ECC firewall {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configure the External Communication Channel (ECC) firewall in your MID Server by specifying the custom rules to selectively allow or reject the incoming message and override the Code Signing configuration.
Security administrators can use the ECC firewall tags to override the Code Signing configuration and allow or reject specific operations on MID Server. These custom rules must be specified in the YAML file of the located at: agent/boot-config.yaml. These tags are specific to a protocol. The configuration specified for the parent tag is applicable to the child tag. For example, if <kbd class="ph userinput">Http</kbd> protocol is allowed, <kbd class="ph userinput">rest</kbd> and <kbd class="ph userinput">soap</kbd> protocols are also allowed. This table outlines the available parents and child tags.{#custom-yaml-conf__table_tcl_p1j_3rb__entry__2}

| Parent tag | Child tag |
|-|-|
| DNS |   |
| HTTP | * REST * SOAP {#custom-yaml-conf__ul_vxz_v1j_3rb} |
| DIRECTORY_SERVICES | LDAP |
| SNMP |   |
| SSH | * SCP * SFTP {#custom-yaml-conf__ul_d4r_x1j_3rb} |
| SYSLOG |   |
| WINDOWS | * CIM * POWERSHELL * WMI * WINRM {#custom-yaml-conf__ul_dkf_bbj_3rb} |
| JAVASCRIPT |   |
| GROOVY |   |
| VCS | GIT |
| DATABASES | JDBC |
| DATA_SOURCES |   |
| INTEGRATION_HUB |   |
| ITOM | * CLOUD_PROVISIONING_GOVERNANCE * DISCOVERY * EVENT_MANAGEMENT * HEALTH_LOG_ANALYTICS * SERVICE_MAPPING {#custom-yaml-conf__ul_oxj_mcj_3rb} |
| ORCHESTRATION |   |
[ ]

{#custom-yaml-conf__table_tcl_p1j_3rb}  
To configure the custom rules:

1. In the MID Server, identify the file boot-config-sample.yaml.
2. Rename the YAML file to boot-config.yaml and move the file to the location: agent/boot-config.yaml.
3. In the YAML file, specify the custom rules and save the changes. An example of the YAML file:

       security:​
         eccFirewall:​
           mode: enforcing​
           rules:​
             - tags: [rest]​
               action: accept​
             - tags: [soap]​
               action: accept​
             - tags: [jdbc]​
               action: reject​

4. Restart the MID Server.
{#custom-yaml-conf__ol_tw5_1mp_spb}