Overview
This article provides a list of domains you may need to whitelist, depending on your network firewall configuration. It also includes a network layout of a common two-terminal site, along with a basic Control Scan (optional) template for reference.
About Genius for Restaurants
Genius for Restaurants is a cloud based Restaurant Point of Sale solution. Genius is comprised of several iOS applications including the main POS application, Kiosk application, Customer Display application, Guest application, and a web based portal for setup and menu configuration. The applications use a multitude of languages including Objective-C, Swift, angular, react, PHP and a few others. Genius uses Amazon's AWS services to send, receive, and store data which includes backup and failover services.
Domains to Whitelist
*.heartland.us - This wildcard should cover all the below HRPOS domains:
- hrpos.heartland.us (ports 443, 3000, 5400)
- hrpos.heartland.us (ports 443, 3000, 5400)
- hrpos.heartland.us (ports 443)
- hrpos.heartland.us (ports 443)
- hrpos.heartland.us (ports 443)
*.appcenter.ms
*.eloview.com - This wildcard should cover the ELOview MDM urls below:
- secure-api.eloview.com/prod (ports 443)
- secure-provisioning.eloview.com/prod (ports 443)
- secure-broker.eloview.com (ports 443)
- secure-logs.eloview.com (ports 443)
- secure-content.eloview.com (ports 443)
- secure-auth.eloview.com (ports 443)
*.datadoghq.com - This wildcard should cover the two Datadog urls below:
- logs.datadoghq.com
- agent-http-intake.logs.datadoghq.com
browser-intake-datadoghq.com
browser-intake-us3-datadoghq.com
2.android.pool.ntp.org (ports 123)
*.gpapis.globalpay.com (ports 443, 8002, 8080, 8081)
The following are for the Como integration:
- https://api.prod.bcomo.com / 443
- https://api.prod.como.com / 443
- https://services.prod.bcomo.com /443
- https://services.prod.como.com /443
- https://image-fit-prod.como-services.com /443
- https://comosense.com /443
- https://agent.comosense.com /443
- https://app.prod.bcomo.com /443
- https://app.prod.como.com /443
- 34.241.204.208/28 : 443
- 13.228.64.144/28 : 443
- 34.239.145.112/28 : 443
- 34.216.110.112/28 : 443
- 52.19.89.241/32
- 52.16.251.183/32
- 52.215.80.220/32
- 52.17.90.11/32
- 35.224.136.189/32
- 34.72.117.66/32
- 35.193.162.127/32
- 34.170.25.224/32
- 35.224.138.44/32
- 34.46.72.148/32
- 34.66.113.165/32
- 34.171.210.117/32
- 104.199.78.141/32
- 130.211.57.2/32
- 35.222.102.120/32
- 34.135.53.172/32
- 34.135.84.52/32
- 34.123.253.204/32
- 212.199.63.58/32
- 161.35.206.194/32
The following is for the Pendo service, which is used to show in-app guidance.
- app.pendo.io / 443
- cdn.pendo.io / 443
- data.pendo.io / 443
- portal.pendo.io / 443
*.storage.googleapis.com [ports: 443, 32, 25, 8080, 64, For SSL, enter 465. For TLS, enter 587]
Additional Domains You May Want to Whitelist
amazonaws.com - We use several Amazon services.
cloudfront.net - This is Amazon’s CDN service.
itstgate.com - This is the BridgePay gateway.
monetary.co - This is the Monetary gateway.
t.broadpos.com - With a PAX device, this will allow communication to download file configurations.
gpr.globalpaymentsinc.ca - May be used with PAX PATT.
If using EMV, we will provide you a more detailed list, as those terminals speak directly to the processor.
Domains that aren't necessarily required to run our system but can be used for certain functionality.
Apple.com - For obvious reasons. This system runs on iOS, so in order to receive security updates, notifications, etc. this should be open. Below are additional Apple domains:
- mzstattic.com
- icloud-content.com
- is1-ssl.mzstattic.com
- is2-ssl.mzstattic.com
- is3-ssl.mzstattic.com
- is4-ssl.mzstattic.com
google.com - Although our application doesn't talk directly with google, we are using some of their maps API in our website. So making setup changes on our admin portal will be loading javascript libraries from google.
Genius Hardware Configuration
Genius Control Scan Network Template
Below is the default network scheme that is used with ControlScan for Genius .
It is important to make sure that the old Xenial SSIDs are ‘forgotten’ on all devices that may have it locally saved to prevent conflicts. Below details the template used for Genius locations.
ControlScan Login and Support
Any changes with ControlScan has to go though control scan.
Support number: (800) 393-3246, option 1
Control Scan Login
https://n134.meraki.com/ES110866-Slaps-B/n/sIJ-ibgc/login/dashboard_login
Control Scan Template
SSIDs
HRPOS Payments: IP Address - 192.168.110.X
HRPOS BackOffice: IP Address - 192.168.20.X
HRPOS Guest: IP Address - 10.0.0.0
Port 1 Hardwired iPads IP range: 192.168.10. 2- .15
Port 1 Printers IP range: 192.168.10. 16-.47
Port 2 PAX: 192.168.40. X
Port 1 PAX(Alternate): 192.168.10. .48-.63
Port 3 any Back Office devices: 192.168.20.X