Working with Firewalls & Domain Allowlisting

A guide on allowlisting your Learnosity-powered platform for schools, universities or corporate networks.

Why do I need to allowlist? 

Within any school, university or corporate network, there's usually a requirement to allowlist certain domains for your product to ensure it works for all your users. We've provided a list below of all the domains that need to be sent on to schools, districts, institutions etc. to ensure that your Learnosity-powered product functions smoothly.

Allowlisting for Learnosity is done by domain, not IP address. One of the reasons for this is that Learnosity is hosted in AWS, as a scalable, cloud based solution. This means that we don't have fixed IPs within this platform, as well as making effective use of CDNs which mean that assets will be served from hosts and IPs closest to your geographical location.

Specific Firewalls 

In some cases, Learnosity has partnered with firewall or content filter companies to make allowlisting even easier.

Palo Alto Networks

Learnosity has partnered with Palo Alto Networks to provide a Learnosity specific signature to make allowlisting simple for end-users. Since Applications and Threat Content Release Version 769, You'll find a Learnosity application ready to be used in any of your content filers, in place of the shortlist below.

URL Allowlist - Short 

Our short list includes all our APIs using wildcards - for the vast majority of modern firewalls and content filters, this should be sufficient.

  • *.learnosity.com
  • learnositymediaprocessed.s3.amazonaws.com (For student upload of files for File Upload and Image Annotation Upload Question types)
  • s3.amazonaws.com/assets.learnosity.com (for Author upload of images, audio and video through the Author API)
  • s3.amazonaws.com/learnositymediaprocessed (For student or teacher resume or review mode of Audio Question types)

URL Allowlist - Long

In cases where you may require the full list of subdomains, these are provided below. We've also provided the region based URLs (e.g. items-va.learnosity.com and items-au.learnosity.com) - based on how you're using Learnosity, you likely will not need all of these below.

Core API domains

Author API

  • authorapi.learnosity.com
  • authorapi-ie.learnosity.com
    (Note: this endpoint should be used for IE based Item banks only. Please talk to our Customer Success team to set this up.

Author Aide

  • authoraide.learnosity.com

Items API

  • items.learnosity.com
  • items-va.learnosity.com
  • items-au.learnosity.com
  • items-ie.learnosity.com
  • items-ca.learnosity.com

Reports API

  • reports.learnosity.com
  • reports-va.learnosity.com
  • reports-au.learnosity.com
  • reports-ie.learnosity.com
  • reports-ca.learnosity.com

Data API

  • data.learnosity.com
  • data-va.learnosity.com
  • data-au.learnosity.com
  • data-ie.learnosity.com
  • data-ca.learnosity.com

Lower Level API domains

Annotations API

  • annotations.learnosity.com
  • annotations-va.learnosity.com
  • annotations-au.learnosity.com
  • annotations-ie.learnosity.com
  • annotations-ca.learnosity.com

Assess API

  • assess.learnosity.com
  • assess-va.learnosity.com
  • assess-au.learnosity.com
  • assess-ie.learnosity.com
  • assess-ca.learnosity.com

Event Bus

  • eventbus.learnosity.com
  • eventbus-va.learnosity.com
  • eventbus-au.learnosity.com
  • eventbus-ie.learnosity.com
  • eventbus-ca.learnosity.com

Events API

  • events.learnosity.com
  • events-va.learnosity.com
  • events-au.learnosity.com
  • events-ie.learnosity.com
  • events-ca.learnosity.com

Questions API

  • questions.learnosity.com
  • questions-va.learnosity.com
  • questions-au.learnosity.com
  • questions-ie.learnosity.com
  • questions-ca.learnosity.com

Question Editor API

  • questioneditor.learnosity.com
  • questioneditor-va.learnosity.com
  • questioneditor-au.learnosity.com
  • questioneditor-ie.learnosity.com
  • questioneditor-ca.learnosity.com

Schemas API

  • schemas.learnosity.com
  • schemas-va.learnosity.com
  • schemas-au.learnosity.com
  • schemas-ie.learnosity.com
  • schemas-ca.learnosity.com

Media asset domains

  • assets.learnosity.com
  • s3.amazonaws.com/assets.learnosity.com
  • s3.amazonaws.com/learnositymediaprocessed
  • shared.learnosity.com

Troubleshooting

CORS origin settings

Cross Origin Resource Sharing (CORS) settings can be configured to allow web page resources to be requested from a remote domain. In the context of Learnosity, this can be relevant for custom Questions.

For example, when creating a custom Question, you may need to open up the CORS privileges for any  files in your custom Question which are hosted outside Learnosity, since this will be hosted on a different domain. For example, files such as authoring_custom_layout.html may require this. In this case, you would use questioneditor.learnosity.com as the configuration value for the CORS origin setting. 

Read more about CORS on Wikipedia.

Was this article helpful?

Did you arrive here by accident? If so, learn more about Learnosity.