Forums: Troubleshooting and Problems
Hello Darryl,
We are working on consolidation of the app traffic to use just several static IP addresses for easier whitelisting. It will be included in one of our next updates.
To resolve firewall issues in the current version 3.1.1, we recommend whitelisting inbound/outbound TCP protocol traffic in port 443 for Community executable files.
Default paths for these files in system-wide installed Community are:
Community 3.1.1 uses a Content Delivery Network (CDN) to ensure high download speeds all over the world. It reaches a set of dynamic IP ranges that would need to be whitelisted (if you cannot open all TCP 443 traffic for app files). IPs being used by Cloudfront CDN are listed on the following page, they are in CLOUDFRONT_GLOBAL_IP_LIST:
http://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips
The majority of Community traffic goes through this network. There are still some other dynamic AWS S3 IP addresses being called outside of CloudFront.
Unfortunately, we cannot provide a complete list of these S3 dynamic addresses yet.
Thanks,
Philipp
Does any previous version use more of a static IP list? If so, is that version still supported and available for download?
Also, do you have an ETA on the newer consolidate version?
One last thing, does the Enterprise version differ, in respect to installation and updates, from the Community version (meaning does Enterprise version get us an offline installer)?
Hello Darryl,
Previous Community versions used the same S3/CDN as the current one, so older versions use dynamic IPs as well.
Unfortunately, we cannot provide an ETA on the Community IP consolidation feature yet.
P21 Enterprise is very different because it's a web application hosted by P21. It runs in the browser and doesn't require installation.
It would of course require having an Internet connection, just like any other website.
If you would like to learn more about the distribution and advantages of Enterprise please use the Request a Demo button at the bottom of this page.
Thanks,
Philipp
I have the same question as before, but with version 4 of the Community Edition:
Can we get a list of the needed urls (this is a very secure environment, were a firewall blocks all outgoing traffic, unless otherwise specifed) ?
Would the Enterprise Version (version 5) work differently with everything being installed locally and not needing outbound connect ?
If Enterprise Version v5 is web based, is there only one (or a few) urls to be opened ?
Hello Antoine,
I can provide you with a list of the required domain URLs if you send us an email at Community@pinnacle21.com.
Pinnacle 21 Enterprise does operate differently than Community. As Philipp mentioned, it's a web application hosted by P21. It runs in the browser and doesn't require installation. It would therefore require an Internet connection, just like any other website.
If you are interested in learning more about Enterprise, I can get you in touch with a member of our dedicated Sales team to discuss further.
Kind regards,
Matt
I realize an internet connection is needed in order to use pinnacle21. We want to make an exception to allow the program to be used from our environment. Can you please provide me with the IPs and URLs needed to connect to your authentication server?
Thanks
Darryl