Tablet: Security and Firewall Requirements

Tablet Services 

KBRemote is an application that is installed on all of your registered MachineMetrics Tablets. This application does a few things including keeping the tablet locked to the tablet view web page, providing us information, like the serial number of your tablet, and allowing us to remotely manage, update, and diagnose issues that might arise with tablets on the shop floor. 

Below you’ll find information pertaining to a few external services our tablet kiosk software needs access to in order to function properly.

*Note: If your organization has a firewall that restricts the traffic to or from the Internet, you need to configure it to allow connectivity with GCM in order for your GCM client apps to receive messages. The ports to open are: 5228, 5229, and 5230. GCM typically only uses 5228, but it sometimes uses 5229 and 5230. GCM doesn't provide specific IPs, so you should allow your firewall to accept outgoing connections to all IP addresses contained in the IP blocks listed in Google's ASN of 15169.

• Heartbeat & API:
  • *.kbremote.net TCP port 443
    • Allows MachineMetrics to view tablet status information (Wifi Connection Name, whether the screen is on and app is in focus).
    • Allows MachineMetrics to execute troubleshooting steps such as refreshing the home page, rebooting the tablet, obtaining a screenshot, etc.
• Storage: 
  • kbremote.table.core.windows.net and kbremote.blob.core.windows.net TCP 443
    
    • Tablets need access to this storage in order to download static files such as the MachineMetrics offline error page
• Authentication:
  • *.auth0.com TCP 443
    • Used to authenticate inbound and outbound traffic between the tablet and the KBRemote service.
• Push (Google Cloud Messaging and Firebase Cloud Messaging):
  • TCP 5228 - 5230, 443 outbound
  • .pushy.me & .pushy.io:443 (Fallback) 
    • Required for push notifications. These are used by our remote management software to execute similar functions as the API above.
    • Via KBRemote site 

If you need additional information on these services, visit this source site. 

For our Operator Dashboard view you'll also need the following:

• machinemetrics.com
  • api.machinemetrics.com
  • graphql.machinemetrics.com
  • operator.machinemetrics.com
• bugsnag.com
  •  sessions.bugsnag.com
• hotjar.com
  • script.hotjar.com
  • static.hotjar.com
  • vars.hotjar.com
• pendo.io
  • cdn.pendo.io
  • data.pendo.io
• segment.com
  • cdn.segment.com
• segment.io
  • api.segment.io
• storage.googleapis.com
  • pendo-static-5204528430055424.storage.googleapis.com
• graphql.johnson.machinemetrics.com
  • https://graphql.johnson.machinemetrics.com
• launchdarkly.com
  • https://app.launchdarkly.com

Have Questions? 

Reach out to us at Support@machinemetrics.com.