Getting Loom desktop through Smoothwall

[kestrel1]

I think the title says it all really.

We are having problems getting Loom to connect to the Internet via our Smoothwall.

The chrome app works fine, but the teachers want to be able to use the desktop version as it works better.

Anyone managed to get Loom going through their Smoothwall?

Thanks

[Jcx500]

Have you set the winhttp proxy ?

[kestrel1]

The proxy is set on the PC, but there are no settings within Loom to allow you to set a proxy.

[ibpalle]

For the desktop version I'm betting the app just use certificate pinning - exclude loom.com from https inspection and see if that does the trick. Browsers behave normally with https inspection but apps are generally written to only connect to a single domain and then just use stored public keys to verify they are talking to the correct server. This will make them fail when they are subjected to https inspection.

[kestrel1]

I have our support company looking at this as well and they are stumped at present as well.

How can I specify loom.com from https inspection. We have one that I assume the support guy has added that is called loom, but not sure that is right.

Don't know much about Smoothwall, so have to keep looking at the web help.

[ibpalle]

loom.com should be enough. If there are any other domains, go to the real time web filter, add the word denied to the category field and the IP you are testing from on the IP field and see if any other traffic from the test IP is being blocked when accessing Loom.

 

If there are no proxy settings, make sure the transparent proxy on Smoothwall is using the "Allow transparent HTTPS incompatible sites and filter other by certificate" for the HTTPS method. You can find this option by editing the auth policy for the transparent proxy.

[SpaceInvader83]

I have our support company looking at this as well and they are stumped at present as well.

How can I specify loom.com from https inspection. We have one that I assume the support guy has added that is called loom, but not sure that is right.

Don't know much about Smoothwall, so have to keep looking at the web help.

 

 

Hi Kestrel,

 

I presume you never got this working? We've just had a look at why the desktop app wasn't working for us with a capture and it's not proxy aware so ignores system proxy settings, it then goes off to AWS so I'd need to let these IP ranges through the firewall to get it to work, we've dropped them a support request to see if we get anywhere with them.

[kestrel1]

Hi spr,

Correct, we never got it sorted. I think our support company have been on to Loom support, but not sure how far they got yet.

I might drop them a line and tell them what you have found. Why not give the app settings for proxy. Seems a bit silly to me.

Will let you know if we get anywhere.

[DannyG555]

Has anyone else managed to get Loom fully working in their environment? We have been struggling with it for a while now on two counts.

 

Main issue we have right now is the upload portion of the process where the upload progress bar just hangs. I did a packet capture from home (where it works without issue) and can see that it wants to connect to a large number of IPs and ports relating to AmazonAWS. How have you gone about whitelisting AmazonAWS?

 

Second, in our environment we redirect the users home folder which includes the My Videos folder to the network. Loom uses this to temporarily store the video until upload. We have been seeing issues where the audio is out of sync. When the My Videos folder is local, we dont see this issue. Anyone else seeing this?

[kestrel1]

We have given up on Loom. We are going to use MS Streams instead. That works through our firewall.

[ultima170387]

https://support.loom.com/hc/en-us/articles/360003793338-Domains-Protocols-and-Ports-required-for-Loom-to-work-on-your-servers-#:~:text=Please%20whitelist%3A&text=loom.com,api.ipify.org

 

I had to add all these to get it working here

[DannyG555]

We have given up on Loom. We are going to use MS Streams instead. That works through our firewall.

 

We do have Teams available and they have the ability to record meetings etc and can upload to Streams. Seems more of a preference that the Head is hell bent on using Loom unfortunately

 

https://support.loom.com/hc/en-us/articles/360003793338-Domains-Protocols-and-Ports-required-for-Loom-to-work-on-your-servers-#:~:text=Please%20whitelist%3A&text=loom.com,api.ipify.org

 

I had to add all these to get it working here

 

Thanks. Have already whitelisted those but unfortunately still doesn't work

 

Such an annoying application and clearly not developed with the understanding of the difficulties of getting this working in education managed networks. For example I hate that by default it installs in to the users appdata folder and that there isn't an installer available to install for all users. (I know there is a workaround to copy and run it out of a shared folder, but still). It has led to users discovering and installing this app during previous lockdown and embedding it in to their future contingency plans before IT were even aware of the desire to use it.

 

One of our Head's continues to stamp up and down for us to get this working. Doesn't help either that the DfE appears to recommend this app

Edited November 13, 2020 by DannyG555

[SpaceInvader83]

If it helps the Chrome extension will work fine through smoothwall, the app not so, doesn't appear proxy aware.

[DannyG555]

If it helps the Chrome extension will work fine through smoothwall, the app not so, doesn't appear proxy aware.

 

I hoped that might have been enough to satisfy SLT, but unfortunately they want to present items which are outside of Chrome :/

[SpaceInvader83]

I hoped that might have been enough to satisfy SLT, but unfortunately they want to present items which are outside of Chrome :/

I can only presume if you are running a transparent proxy in Smoothwall you would have greater success, but I've not gone as far to test this yet