The following external hostnames and services must be accessible to ensure the correct operation of SEQTA, including core application functionality, AI Assist, mobile notifications, syllabus services, updates, and security services.
Required Hostnames
| Hostname | Primary IP | Description |
|---|---|---|
| ai.seqta.com | AWS Load Balancer | AI Assist services used for lesson planning, assessment feedback summaries, and other AI features. |
| database.clamav.net | Cloudflare CDN | ClamAV antivirus signature updates. |
| au.archive.ubuntu.com | 202.158.214.106 | Ubuntu software repository (Australian mirror). |
| archive.canonical.com security.ubuntu.com | Various | Ubuntu software and security updates. |
| changelogs.ubuntu.com/meta-release-lts | Various | Ubuntu version checks and operating system upgrade notifications. |
| syllabus-api.service.seqta.com | AWS Load Balancer | Syllabus Warehouse service used for curriculum and reporting data. |
| download.docker.com | CloudFront CDN | Docker package repository. |
| ppa.launchpad.net | 185.125.190.80-190 2620:2d:4000:1009::0100/120 | Third-party software repositories for Ansible and related packages. |
| fcm.googleapis.com | Google Cloud | Android push notifications for SEQTA mobile applications. |
| api.push.apple.com api-vs.push-apple.com.akadns.net | 17.188.128.0/18 | Apple push notifications for SEQTA mobile applications. |
| vpn.syd.seqta.com.au vpn2.syd.seqta.com.au time.seqta.com.au | 52.63.155.253 52.62.57.243 | OpenVPN and NTP services used by SEQTA infrastructure. |
| 652178923530.dkr.ecr.ap-southeast-2.amazonaws.com | AWS Load Balancer | AWS ECR repository for ARM64 container images. |
| 659678701393.dkr.ecr.ap-southeast-2.amazonaws.com | AWS Load Balancer | AWS ECR repository for AMD64 container images. |
| ssm.ap-southeast-2.amazonaws.com | AWS Load Balancer (99.82.x.x / 99.83.x.x) | AWS Systems Manager endpoint. |
Hostnames of Interest (Not Required)
| Hostname | Primary IP | Description |
|---|---|---|
| mail.syd.seqta.com.au | 54.66.249.142 | Legacy SMTP relay available via the SEQTA Client VPN. |
| proxy.syd.seqta.com.au | 13.238.110.14 | Software update proxy available via the SEQTA Client VPN. |
| community.seqta.com.au | 184.105.99.43 2602:fd3f:3:ff01::2b | SEQTA Community portal hosted on Discourse. |
| render.seqta.com.au | 52.62.106.191 2406:da1c:3bf:b400:fc10:5b01:1a0b:f0d | Mathematical equation and LaTeX rendering service. |
| element.jaspersoft.com | 3.209.152.116 107.23.173.2 | JasperReports licensing validation service. |
| jrs-heartbeat.cloud.jaspersoft.com | 63.182.115.50 63.176.153.248 63.183.88.72 | JasperReports Server licensing heartbeat service. |
| acme-v02.api.letsencrypt.org | CloudFlare CDN | LetsEncrypt registration. Does not include verification as we do not know which of their servers will connect back |
Additional NTP Service: time.apple.com may also be contacted for time synchronisation.
Network Security Considerations
SEQTA does not support SSL/TLS interception, HTTPS inspection, MITM proxying, or customer-supplied certificate authority injection. These technologies may cause platform services to fail because certificates presented by the inspection device will not be trusted.
Firewall Recommendations
- Allow outbound HTTPS (TCP/443).
- Allow outbound NTP (UDP/123).
- Allow access to Apple Push Notification Service (APNS).
- Allow access to Firebase Cloud Messaging (FCM).
- Allow access to AWS service endpoints.
- Allow access to Ubuntu and Docker repositories.
Best Practice
Where possible, permit traffic by hostname (FQDN) rather than IP address. Many services are cloud-hosted and may change IP addresses without notice.
Summary
For successful operation of SEQTA, ensure unrestricted outbound HTTPS access to the required hostnames listed above and avoid SSL inspection technologies. Hostname-based allow-listing is strongly recommended wherever supported.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article