Firewall Settings

Catalog Kiosk by Wondersign has two requirements to function properly:

  • Power (Regular 120v)
  • Internet Connection (300 kbps minimal bandwidth).

 

Catalog Kiosk requires direct Internet access and can be connected via Ethernet or Wifi. The kiosk can be placed in your network’s DMZ or VLAN when security concerns prohibit adding devices to your LAN.

Firewall Rules

In order for Catalog Kiosk to work, your firewall rules should connect to the following hosts and ports:

*.wondersign.com 80/HTTP and 443/HTTPS
*.catalogkiosk.com 80/HTTP and 443/HTTPS
*.pubnub.com 80/HTTP and 443/HTTPS
*.keen.io 80/HTTP and 443/HTTPS
*.bugsnag.com 443/HTTPS
*.ionicjs.com 80/HTTP and 443/HTTPS

Chrome Host Name Whitelist

This section is only applicable to Chrome-based kiosks: large format kiosk 32”, 42”, and 46”.

  • accounts.google.com
  • accounts.gstatic.com
  • accounts.youtube.com
  • clients1.google.com
  • clients2.google.com
  • clients3.google.com
  • clients4.google.com
  • commondatastorage.googleapis.com
  • cros-omahaproxy.appspot.com
  • dl.google.com
  • dl-ssl.google.com
  • gweb-gettingstartedguide.appspot.com
  • m.google.com
  • omahaproxy.appspot.com
  • pack.google.com
  • safebrowsing-cache.google.com
  • safebrowsing.google.com
  • ssl.gstatic.com
  • storage.googleapis.com
  • tools.google.com
  • www.googleapis.com
  • www.gstatic.com
  • mtalk.google.com
  • chrome.google.com
  • clients2.googleusercontent. com
  • lh3.ggpht.com
  • lh4.ggpht.com
  • lh5.ggpht.com
  • lh6.ggpht.com
  • connectivitycheck.android.com

 

To ensure that Chrome devices work with SSL inspection, you need to whitelist the above mentioned host names on your proxy server. For details on how to whitelist host names, please check with your web filter provider.

 


Concept Link IconSee Also