For network admin use only:

Tute's new platform is now live as of October 31st 2022.  Please find the IT Firewall requirements for the new platform below.

Firewall requirements:

Below is a list of all ports that need unrestricted access for outbound requests to our lesson server. 

You can map the outbound requests to our server IP ranges if you don't want to open our required ports to all traffic.  Each individual Tute lesson will utilize a random IP address allocated from any one of the IP address ranges listed below.

URLs to Whitelist:

*.tute.com 

(to allow full access to our main website www.tute.com and the log in page www.tute.com/log-in)

Required Ports:

TCP:

• 7443

UDP:

• Range: 16384 - 32767

In addition, to improve the success and speed of WebRTC media connections, we recommend allowing the following network traffic :

• Outbound and inbound UDP packets to port 3478 (STUN and TURN)
• Outbound TCP connections to port 443 (TURN over TLS)

IP Ranges: 

! If you have any of our older IP Ranges still in place, please remove those.  Only the following ranges will be used moving forward.

• 185.62.212.128/25  (185.62.212.129 - 185.62.212.254)
• 185.62.213.128/25  (185.62.213.129 - 185.62.213.254)
• 185.62.213.64/27    (185.62.213.65   - 185.62.213.94)

HTTP/HTTPS access to:

• • *.tute.com - Make sure to include the wildcard where possible.  If using a proxy, it should be white-listed, issues may occur with forms authenticated filtering
  • *.office.com - Various subjects use Microsoft Office online features, e.g.: MS Sway and MS Forms
•  
  • WebSockets:
    • Tute uses the WebSocket protocol -                                                      (https://developer.mozilla.org/en-US/docs/Web/API/WebSockets_API).
    • You may experience issues when Tute WebSocket traffic is inspected, as it goes through your firewall / filtering systems.  Please ensure WebSocket traffic over HTTPS is unrestricted.        You can set your rule(s) to only allow WebSocket traffic for Tute based on our IP Ranges stated above.

Common Errors:

1007: ICE negotiation failed - The browser tried to negotiate ports to use to stream the media and that negotiation failed. Possible Causes:

• NAT is blocking the connection
• Firewall is blocking the UDP connection/port

Websocket (WS) error 1002:

If you have opened up the required ports listed above you may also have to enable websockets through your firewall.  Here is an article on how to do this with SmoothWall:

https://kb.smoothwall.com/hc/en-us/articles/360003342820-Allowing-Access-to-WebSockets-Through-the-Smoothwall-Filter

Error 1004:

This could be due to the STUN port 3478 being restricted.  If the default port for STUN is restricted, it will attempt to use an alternative port.  Some firewalls are configured to block the alternative ports if the default one isn't used.

"You must have the BigBlueButton HTML5 client installed to use this API"

This is a error we have seen on managed iPads when attempting to join the demo room or live lesson.  Please ensure you have Java and Pop-ups enabled on the device.