Firewalls, content filters, proxy servers and security software with similar functions can interfere with the installations, updates or operation of Respondus LockDown Browser. Problems can be related to other applications that are running on the client computer or on the institution gateway servers, or both.
LockDown Browser and Respondus Monitor needs to connect to the Respondus servers.
For the various LockDown Browser LMS server integrations (blocks, modules, LTI tools) the Respondus servers need access to the integration or module on the LMS server and the integration on the LMS needs to access the Respondus servers at: https://smc-service-cloud.respondus2.com
The LockDown Browser client web browser and Respondus Monitor "webcam" option use the following domains when accessing the Respondus servers:
*.amazonaws.com
*.respondus.com
*.respondus2.com
*.respondus7.com
We recommend including the "*.amazonaws.com" primary domain as some of the Respondus domains actually redirect to secure servers hosted on AWS. Also several of the LMSs, such as Instructure Canvas and D2L Brightspace use AWS and it's related Amazon Cloudfront.
For the client web browser used by students, the more specific domains are:
Server profiles: server-profiles-respondus-com.s3-external-1.amazonaws.com
Update server: static-public-downloads-cloud.respondus.com
Installs/Downloads: download.respondus.com
Monitor server: smc-service-cloud.respondus2.com
For all domains, the protocols and ports are:
All connections, for all domains, are on port 443 only and require TLS 1.2+.
Outgoing access must be allowed to:
*.amazonaws.com port 443 (HTTPS)
*.respondus.com port 443 (HTTPS)
*.respondus2.com port 443 (HTTPS)
*.respondus7.com port 443 (HTTPS)
The LMS must allow incoming access from: 34.199.184.160 (VPC NAT)
If using LockDown Browser for iPad, outgoing access must be allowed to:
13.248.132.172 port 80 TCP and 1935 TCP
76.223.4.46 port 80 TCP and 1935 TCP
Traffic is RTMPT video/audio on both ports. Port 80 is attempted if port 1935 is blocked.
No traffic is routed on port 80 for anything hosted on AWS (Amazon Web Services) except for RTMPT used only by the iPad.
As the Respondus servers are "in the cloud", unless specified, IP addresses are dynamically assigned and subject to change without notice. It is highly recommend using URLs or domains resolved through DNS whenever possible in any firewall, router or similar security software settings.
The latest IP address ranges for Amazon Web Services US East (Northern Virginia) can be found at:http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html