SnapComms Desktop Application and Network Safe Listing Requirements

NETWORK CONNECTIVITY REQUIREMENTS

Internet connectivity is required for the SnapComms App to connect to the SnapComms server. Traffic destined for the SnapComms server passes through port 443 (HTTPS). The SnapComms systems are load balanced, use Content Delivery Network services, and are globally redundant. As a result, IP-based safe-listing is highly discouraged and can lead to operational problems in failover or load-balancing scenarios.

To ensure that the SnapComms Applications can continuously communicate successfully with the cloud-based backend services, the recommended approach is allowing outbound HTTPS (443) access to the following. 

• *.snapcomms.com

• firestore.googleapis.com

Ensure that any firewall or proxy is operating fully transparently and does not change any existing request or response headers. This is especially important for Encoding, Encryption, Chunking, and Authentication headers. Any interference can lead to connectivity and functional problems with the applications. 

If your organization's policies require a more granular rule set, the following addresses form the minimum requirements to be included in your firewall's safe list. Please note that these minimum requirements are subject to change and we strongly advise using the recommended settings above. The [organizationName] below relates to the subdomain assigned to your organization. 

• www.snapcomms.com
• login.snapcomms.com
• download.snapcomms.com
• storageservice.snapcomms.com
• storagecdn.snapcomms.com
• contentcdn*.snapcomms.com
• cdnglobal.snapcomms.com
• snapcdn*.snapcomms.com
• snapcdn.snapcomms.com
• *-cdn.snapcomms.com
• ContentManagerName.svc.snapcomms.com
• ContentManagerName.content.snapcomms.com
• firestore.googleapis.com
• notification.snapcomms.com

*Replace ContentManagerName with your Content Manager Name / Subdomain

* The email address notification@snapcomms.com must also be added to your Mail server's safe sender list.

Ensure that Certificate Revocation URLs are safe-listed as well, refer to Certificate requirements for more information.

SNAPCOMMS APPLICATION FILES

The SnapComms App, installed on users' desktops to receive alerts published from the SnapComms Content Manager, is delivered as a pre-packaged MSI file. We recommend adding the list of files and folders below to your anti-virus safe list to make sure that the application operates correctly and successfully downloads and displays contents. 
Files: 

• C:\Program Files (x86)\SnapComms\App\{minor version}\SnapClient.exe

• C:\Program Files (x86)\SnapComms\App\{minor version}\SnapClientService.exe

• C:\Program Files (x86)\SnapComms\App\{minor version}\SnapClientHelper.exe

• C:\Program Files (x86)\SnapComms\App\{minor version}\WpfSnapClient.exe

• C:\Program Files (x86)\SnapComms\App\{minor version}\SnapCrashReport.exe

• C:\Program Files (x86)\SnapComms\App\{minor version}\CefSharp.BrowserSubprocess.exe

• C:\Windows\SnapSCR.scr

Folders:

• C:\Program Files (x86)\SnapComms and its subfolders

• C:\Users\{username}\AppData\Local\SnapComms App and its subfolders

• C:\Users\{username}\AppData\Local\Temp\SnapClient