About

This guide is to help you configure firewall rules for accessing MazeMap services. It includes the necessary service URLs, ports, and regions, as well as additional steps for allowing the Mapbox APIs.

Prerequisites

Before you begin, ensure the following

• Firewall Configuration Access: Ensure you have the necessary access to configure firewall rules or contact your IT department for assistance.

Firewall Rules

To ensure proper access to MazeMap services, configure your firewall with the following rules:

MazeMap Access

Configure your firewall to allow access to the following MazeMap services:

MazeMap Indoor Positioning (LIPI)

The local network topology needs to be such that the source IP address of the packets received by the LIPI server corresponds with the local IP address of that users device in the positioning system.

That means there should be no NAT or proxy between the clients and the Proxy-LIPI server.

For On-Prem Positioning (e.g., Cisco Spaces)

• Local network traffic -> port 443 -> LIPI -> port 443 -> on-prem positioning host.

• Optional: Port 443 to MazeMap (allows for updates and sending heartbeats but is not required).

For Cloud Positioning (e.g., Cisco Spaces)

• Local network traffic -> port 443 -> LIPI -> port 443 → cloudpositioning.mazemap.com.

• This configuration will require external access.

Mapbox Access

MazeMap uses Mapbox APIs, which may require additional firewall configuration. If you encounter issues accessing Mapbox APIs behind a firewall, follow these steps:

1. Allow List Configuration: Add the domain api.mapbox.com to your allow list.

2. Handling Distributed Servers: Mapbox uses distributed and dynamically-allocated servers rather than a fixed set of IP addresses. Normally, adding mapbox.com to your allow list is sufficient.

3. Specific Domains Allow List: In some cases, you may also need to add the following specific domains to your allow list:

   • *.mapbox.com

Steps to Configure Firewall

1. Access your firewall configuration settings.

2. Add the service URL use.mazemap.com with port 443 to the allow list for the specified regions.

3. Add api.mapbox.com to the allow list.

4. If needed, add *.mazemap.com and *.mapbox.com to the allow list to ensure all necessary subdomains are included.

Contact Information

For further assistance or if you encounter any issues, please contact your IT department or MazeMap Support or Log a MazeMap Support Ticket