kestrel1 Posted September 17, 2020 Posted September 17, 2020 I think the title says it all really. We are having problems getting Loom to connect to the Internet via our Smoothwall. The chrome app works fine, but the teachers want to be able to use the desktop version as it works better. Anyone managed to get Loom going through their Smoothwall? Thanks
kestrel1 Posted September 17, 2020 Author Posted September 17, 2020 The proxy is set on the PC, but there are no settings within Loom to allow you to set a proxy.
ibpalle Posted September 17, 2020 Posted September 17, 2020 For the desktop version I'm betting the app just use certificate pinning - exclude loom.com from https inspection and see if that does the trick. Browsers behave normally with https inspection but apps are generally written to only connect to a single domain and then just use stored public keys to verify they are talking to the correct server. This will make them fail when they are subjected to https inspection.
kestrel1 Posted September 17, 2020 Author Posted September 17, 2020 I have our support company looking at this as well and they are stumped at present as well. How can I specify loom.com from https inspection. We have one that I assume the support guy has added that is called loom, but not sure that is right. Don't know much about Smoothwall, so have to keep looking at the web help.
ibpalle Posted September 21, 2020 Posted September 21, 2020 loom.com should be enough. If there are any other domains, go to the real time web filter, add the word denied to the category field and the IP you are testing from on the IP field and see if any other traffic from the test IP is being blocked when accessing Loom. If there are no proxy settings, make sure the transparent proxy on Smoothwall is using the "Allow transparent HTTPS incompatible sites and filter other by certificate" for the HTTPS method. You can find this option by editing the auth policy for the transparent proxy.
SpaceInvader83 Posted October 16, 2020 Posted October 16, 2020 I have our support company looking at this as well and they are stumped at present as well. How can I specify loom.com from https inspection. We have one that I assume the support guy has added that is called loom, but not sure that is right. Don't know much about Smoothwall, so have to keep looking at the web help. Hi Kestrel, I presume you never got this working? We've just had a look at why the desktop app wasn't working for us with a capture and it's not proxy aware so ignores system proxy settings, it then goes off to AWS so I'd need to let these IP ranges through the firewall to get it to work, we've dropped them a support request to see if we get anywhere with them.
kestrel1 Posted October 16, 2020 Author Posted October 16, 2020 Hi spr, Correct, we never got it sorted. I think our support company have been on to Loom support, but not sure how far they got yet. I might drop them a line and tell them what you have found. Why not give the app settings for proxy. Seems a bit silly to me. Will let you know if we get anywhere. 1
DannyG555 Posted November 13, 2020 Posted November 13, 2020 Has anyone else managed to get Loom fully working in their environment? We have been struggling with it for a while now on two counts. Main issue we have right now is the upload portion of the process where the upload progress bar just hangs. I did a packet capture from home (where it works without issue) and can see that it wants to connect to a large number of IPs and ports relating to AmazonAWS. How have you gone about whitelisting AmazonAWS? Second, in our environment we redirect the users home folder which includes the My Videos folder to the network. Loom uses this to temporarily store the video until upload. We have been seeing issues where the audio is out of sync. When the My Videos folder is local, we dont see this issue. Anyone else seeing this?
kestrel1 Posted November 13, 2020 Author Posted November 13, 2020 We have given up on Loom. We are going to use MS Streams instead. That works through our firewall.
ultima170387 Posted November 13, 2020 Posted November 13, 2020 https://support.loom.com/hc/en-us/articles/360003793338-Domains-Protocols-and-Ports-required-for-Loom-to-work-on-your-servers-#:~:text=Please%20whitelist%3A&text=loom.com,api.ipify.org I had to add all these to get it working here
DannyG555 Posted November 13, 2020 Posted November 13, 2020 (edited) We have given up on Loom. We are going to use MS Streams instead. That works through our firewall. We do have Teams available and they have the ability to record meetings etc and can upload to Streams. Seems more of a preference that the Head is hell bent on using Loom unfortunately https://support.loom.com/hc/en-us/articles/360003793338-Domains-Protocols-and-Ports-required-for-Loom-to-work-on-your-servers-#:~:text=Please%20whitelist%3A&text=loom.com,api.ipify.org I had to add all these to get it working here Thanks. Have already whitelisted those but unfortunately still doesn't work Such an annoying application and clearly not developed with the understanding of the difficulties of getting this working in education managed networks. For example I hate that by default it installs in to the users appdata folder and that there isn't an installer available to install for all users. (I know there is a workaround to copy and run it out of a shared folder, but still). It has led to users discovering and installing this app during previous lockdown and embedding it in to their future contingency plans before IT were even aware of the desire to use it. One of our Head's continues to stamp up and down for us to get this working. Doesn't help either that the DfE appears to recommend this app Edited November 13, 2020 by DannyG555
SpaceInvader83 Posted November 13, 2020 Posted November 13, 2020 If it helps the Chrome extension will work fine through smoothwall, the app not so, doesn't appear proxy aware.
DannyG555 Posted November 13, 2020 Posted November 13, 2020 If it helps the Chrome extension will work fine through smoothwall, the app not so, doesn't appear proxy aware. I hoped that might have been enough to satisfy SLT, but unfortunately they want to present items which are outside of Chrome :/
SpaceInvader83 Posted November 13, 2020 Posted November 13, 2020 I hoped that might have been enough to satisfy SLT, but unfortunately they want to present items which are outside of Chrome :/I can only presume if you are running a transparent proxy in Smoothwall you would have greater success, but I've not gone as far to test this yet
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now