Echo360 recommends whitelisting certain URLs, IP addresses, and email domains if you are using EchoExam. This will ensure that online resources are available to your organization's users, and that all of your organization's users are able to receive email notifications from Echo360.
This article is intended to provide your organization network administrators with the information necessary to whitelist content.
URLs by Region
EchoExam is fully hosted with Amazon Web Services (AWS) for development, test, and production environments. AWS provides Echo360 with security and scalability features that we take advantage of. Auto Scaling groups and load balancers are some of the services that are used. When servers need to scale to support high traffic and / or loads, the auto scaling group will add additional servers to the load balancers. When these additional servers are added, AWS assigns a new dynamic IP address to each new server from the following list: https://ip-ranges.amazonaws.com/ip-ranges.json
Due to the scalability and security aspects for our environments, Echo360 does not use static IP addresses. For this reason, we provide the below list of URLs in order to whitelist by URL rather than static IP address.
It is recommended to whitelist URLs using wildcard characters (*) when possible, since most EchoExam URLs follow the same structure.
Some URLs still reference Turning Technologies. These are still relevant and will be phased out to Echo360 domains in the future.
North and South America
| Function | URL |
|---|---|
| Browser Client Application for Organization Administrator Role | app.echoexam.com |
| Browser Client Application for Instructor Role |
instructor.echoexam.com |
| Browser Client Application for Learner Role |
learner.echoexam.com |
| Browser Client Application for Sign In and Account Sign Up |
signin.echoexam.com |
| Authentication form, SSO Service Provider, LTI Link Handling, Legacy User and License APIs |
account.echoexam.com |
| Main API gateway for Client APIs |
api.echoexam.com |
| CloudFront distribution for Browser Client Application JavaScript files |
appclient.turningtechnologies.com |
| CloudFront distribution for static images, fonts, etc |
cdn.turningtechnologies.com |
| CloudFront distribution for user content (i.e. HotSpot question images) |
user-content.turningtechnologies.com |
| Identity Provider for SAML Single Sign On |
idp.turningtechnologies.com |
| Handler for OAuth authentication for LMS sign ins |
oauth.turningtechnologies.com |
| Provides list of URLs needed for various production environments |
region.turningtechnologies.com |
| Upload URL for user content (i.e. HotSpot question images) |
com-turningtech-user-content-production.s3.amazonaws.com |
| Upload URL for user content (i.e. HotSpot question images) |
com-turningtech-user-content-production.s3-accelerate.amazonaws.com |
| Upload URL for user content |
upload.filestackapi.com |
| User content distribution |
cdn.filestackcontent.com |
Europe, Africa, and Middle East
| Function | URL |
|---|---|
| Browser Client Application for Organization Administrator Role | app.echoexam.eu |
| Browser Client Application for Instructor Role | instructor.echoexam.eu |
| Browser Client Application for Learner Role | learner.echoexam.eu |
| Browser Client Application for Sign In and Account Sign Up | signin.echoexam.eu |
| Authentication form, SSO Service Provider, LTI Link Handling, Legacy User and License APIs | account.echoexam.eu |
| Main API gateway for Client APIs | api.echoexam.eu |
| CloudFront distribution for Browser Client Application JavaScript files | appclient.turningtechnologies.eu |
| CloudFront distribution for static images, fonts, etc | cdn.turningtechnologies.eu |
| CloudFront distribution for user content (i.e. HotSpot question images) | user-content.turningtechnologies.eu |
| Identity Provider for SAML Single Sign On | idp.turningtechnologies.eu |
| Handler for OAuth authentication for LMS sign ins | oauth.turningtechnologies.eu |
| Provides list of URLs needed for various production environments | region.turningtechnologies.eu |
| Upload URL for user content (i.e. HotSpot question images) | eu-turningtech-user-content-production.s3.amazonaws.com |
| Upload URL for user content (i.e. HotSpot question images) | eu-turningtech-user-content-production.s3-accelerate.amazonaws.com |
| Upload URL for user content | upload.filestackapi.com |
| User content distribution | cdn.filestackcontent.com |
Asia Pacific
| Function | URL |
|---|---|
| Browser Client Application for Organization Administrator Role | app.echoexam.au |
| Browser Client Application for Instructor Role | instructor.echoexam.au |
| Browser Client Application for Learner Role | learner.echoexam.au |
| Browser Client Application for Sign In and Account Sign Up | signin.echoexam.au |
| Authentication form, SSO Service Provider, LTI Link Handling, Legacy User and License APIs | account.echoexam.au |
| Main API gateway for Client APIs | api.echoexam.au |
| CloudFront distribution for Browser Client Application JavaScript files | appclient.turningtechnologies.au |
| CloudFront distribution for static images, fonts, etc | cdn.turningtechnologies.au |
| CloudFront distribution for user content (i.e. HotSpot question images) | user-content.turningtechnologies.au |
| Identity Provider for SAML Single Sign On via PointSolutions Account | idp.turningtechnologies.au |
| Handler for OAuth authentication for LMS sign ins | oauth.turningtechnologies.au |
| Provides list of URLs needed for various production environments | region.turningtechnologies.au |
| Upload URL for user content (i.e. HotSpot question images) | com-turningtechsg-user-content-production.s3.amazonaws.com |
| Upload URL for user content (i.e. HotSpot question images) | com-turningtechsg-user-content-production.s3-accelerate.amazonaws.com |
| Upload URL for user content | upload.filestackapi.com |
| User content distribution | cdn.filestackcontent.com |
Ports
EchoExam web service traffic uses port 443. Traffic on port 80 will normally be redirected to port 443.
Inbound Communications
In some cases, web traffic will need to reach your organization URLs from an Echo360 server. Integrations into your Central Authentication Service (CAS) or Learning Management System (LMS) may require whitelisting the Network Address Translation (NAT) Gateway static IP addresses.
| Environment / Region | IP Addresses |
|---|---|
| User Acceptance Testing (UAT) |
52.204.209.180 |
| North and South America Production | 52.22.54.74 52.0.29.153 |
| Europe, Africa, and Middle East Production | 52.28.19.246 52.58.229.99 |
| Asia Pacific Production | 52.77.14.225 52.220.21.241 |
Sub-Processors
Echo360 uses certain sub-processors to assist in providing quality services to our EchoExam customers. The following list of sub-processors is authorized to process customer data for Echo360 services and are required for usage.
| Vendor | Reason | Whitelist Information |
|---|---|---|
| reCAPTCHA | Distinguishes between human and automated access to websites reCAPTCHA uses an advanced risk analysis engine and adaptive challenges to keep malicious software from engaging in abusive activities on our platform while granting legitimate users access |
https://code.google.com/archive/p/recaptcha/wikis/FirewallsAndRecaptcha.wiki |
| FileStack | File handling service Facilitates uploads, transformations, and delivery of user-generated content |
upload.filestackapi.com cdn.filestackcontent.com process.filestackapi.com |
Email Domains
The following email domains may need to be whitelisted if users are unable to receive email notifications from Echo360:
@turningtechnologies.com
@email-relay-us-east-1.turningtechnologies.com
@email-relay-us-west-2.turningtechnologies.com
@email-relay-eu-west-1.turningtechnologies.com
@echo360.com
@echoexam.com