Firewall Settings
Catalog Kiosk by Wondersign has two requirements to function properly:
- Power (Regular 120v)
- Internet Connection (300 kbps minimal bandwidth).
Catalog Kiosk requires direct Internet access and can be connected via Ethernet or Wifi. The kiosk can be placed in your network’s DMZ or VLAN when security concerns prohibit adding devices to your LAN.
Firewall Rules
In order for Catalog Kiosk to work, your firewall rules should connect to the following hosts and ports:
*.wondersign.com 80/HTTP and 443/HTTPS
*.catalogkiosk.com 80/HTTP and 443/HTTPS
*.pubnub.com
80/HTTP and 443/HTTPS
*.keen.io 80/HTTP and 443/HTTPS
*.bugsnag.com 443/HTTPS
*.ionicjs.com
80/HTTP and 443/HTTPS
Chrome Host Name Whitelist
This section is only applicable to Chrome-based kiosks: large format kiosk 32”, 42”, and 46”.
- accounts.google.com
- accounts.gstatic.com
- accounts.youtube.com
- clients1.google.com
- clients2.google.com
- clients3.google.com
- clients4.google.com
- commondatastorage.googleapis.com
- cros-omahaproxy.appspot.com
- dl.google.com
- dl-ssl.google.com
- gweb-gettingstartedguide.appspot.com
- m.google.com
- omahaproxy.appspot.com
- pack.google.com
- safebrowsing-cache.google.com
- safebrowsing.google.com
- ssl.gstatic.com
- storage.googleapis.com
- tools.google.com
- www.googleapis.com
- www.gstatic.com
- mtalk.google.com
- chrome.google.com
- clients2.googleusercontent. com
- lh3.ggpht.com
- lh4.ggpht.com
- lh5.ggpht.com
- lh6.ggpht.com
- connectivitycheck.android.com
To ensure that Chrome devices work with SSL inspection, you need to whitelist the above mentioned host names on your proxy server. For details on how to whitelist host names, please check with your web filter provider.