Platform Network & Connectivity Requirements

Firewall and Domain Requirements for Platform Access

Introduction

To ensure the XY Sense platform functions correctly for your end users, your network configuration must allow outbound traffic to several cloud-hosted services. This includes our core application, authentication providers, and real-time data streams.

Protocol Requirements

The XY Sense platform uses two primary methods of communication. It is vital that your network infrastructure supports both to ensure a seamless experience.

Protocol	Port	Usage Type	Requirement
HTTPS	443	Request/Response	Standard web traffic for loading the dashboard, images, and fonts.
WSS	443	Persistent Bi-directional	Critical for Real-time Data. Used for live occupancy updates and instant support chat.

WebSocket (WSS) Endpoints

The following domains establish long-lived connections. If your network uses Deep Packet Inspection (DPI) or a Proxy, please ensure it is configured to allow the Connection: Upgrade and Upgrade: websocket headers for:

Live Occupancy: a3iun0ocnfkxx9-ats.iot.ap-southeast-2.amazonaws.com
Support Chat: *.zendesk.com and *.zopim.com
In-App Guides: api.appcues.net and *.productfruits.com

Impact of WSS Blocking

If WebSocket traffic is restricted, the following issues will occur:

Stale Data: Occupancy maps will not update in real-time. Users will have to manually refresh their browser to see sensor changes.
Support Failure: The "Live Chat" feature will be unable to connect to our support team.
App Latency: The application may attempt to "fallback" to long-polling, which can result in increased network overhead and a degraded user experience.

Required Domain Allow-list

Category	Domain / Hostname	Protocol	Service Purpose
Primary Platform	*.xysense.io	HTTPS	Core Application and API access.
Authentication	cognito-idp.ap-southeast-2.amazonaws.com cognito-identity.ap-southeast-2.amazonaws.com	HTTPS	Secure User Identity Management (AWS Cognito).
Real-Time Data	a3iun0ocnfkxx9-ats.iot.ap-southeast-2.amazonaws.com 89d7w1bps9.execute-api.ap-southeast-2.amazonaws.com	HTTPS / WSS	Live occupancy streaming and IoT communication.
Mapping & GIS	maps.googleapis.com fonts.gstatic.com	HTTPS	Interactive floorplans and spatial visualization.
Support & Chat	.zendesk.com .zdassets.com *.zopim.com zendesk-eu.my.sentry.io	HTTPS / WSS	Support ticketing, documentation, and live chat.
Success & Guides	*.productfruits.com fast.appcues.com api.appcues.net app.vitally.io	HTTPS / WSS	In-app user onboarding and feature guides.
Static Assets	use.fontawesome.com fonts.googleapis.com use.typekit.net	HTTPS	Content Delivery Networks (CDN) for UI icons and fonts.