Technical Configuration Guide: Firewall, Email, & Video

Firewall, Email & Video Configuration ensures that members are able to fully leverage all aspects of the BetterUp® platform.

Jump to Section:
Firewall Configuration | Email Enablement | Video Session Enablement 

Video/Audio Quality Check | Edge Cases

🚨Important 🚨
🕓 Configuration must be completed at least 2 weeks prior to your launch date.
📩 Need help? General questions about completing the guide or support troubleshooting can be sent to tech-ipm@betterup.co.
🔧 BetterUp offers both US and EEA-based platform instances and configuration setting differ. If you're not sure, contact your BetterUp Account Team for clarification.

• 🇺🇸 US instance is hosted in Virginia, USA
• 🇪🇺 EEA instance is hosted in Frankfurt, Germany

Firewall Configuration 

We highly recommend that you enable a wildcard domain to your firewall allowed domain list so that any and all BetterUp features and content can be accessed by your members. 

If you would prefer to not enable a wildcard domain, then you will need to allow access to the following subdomains. It is possible that subdomains may be added to this list in the future and you will need to update your allow list to ensure that employees can continue having access to their BetterUp experience. 

If you have followed the steps above your members shouldn’t have any issues when using our applications. In case you have any questions or issues during this setup please reach out to tech-ipm@betterup.co.

Email Enablement

All emails delivered by the platform follow industry-standard configurations including: SPF, DKIM, and DMARC.  

• Emails coming from the BetterUp platform to users (e.g., invite emails) will be sent from support@betterup.co. 

• Emails coming from our custom email service provider, Braze, will be sent from team@mail.betterup.co or support@mail.betterup.co. 

• Operational emails and other engagement emails may be sent from no-reply@mail.betterup.co.

In order for email delivery and interaction to operate as smoothly as possible, we recommend allowing the following:

Depending on your firewall rules, it may be necessary to allow the following IP addresses:

Video Session Enablement

BetterUp users meet with their coaches virtually through our peer-to-peer video chat. We use an external service called Vonage to enable this functionality. In order for this to work properly, the following actions need to be taken: 

Along with the minimum requirements above, opening UDP Port 3478 will give a better experience. UDP is highly recommended over TCP for better quality audio and video. The protocol favors timeliness over reliability which is consistent with the human perceptive preferences; where we can fill in gaps but are sensitive to time-based delays. This port only accepts inbound traffic after an outbound request is sent. The connection is bidirectional but is always initiated from the corporate network/client so it is not possible for an external entity to send malicious traffic in the opposite direction. For the best possible experience, we recommend opening UDP ports 1025 - 65535.

See the official Vonage support documentation for more detailed instructions on firewall configuration to support video calls.

Video/Audio Quality Check

Once the above domains have been allowed you should perform the Vonage pre-call check, save the test data, and send back to BetterUp for review — this will help us get ahead of any potential call quality-related issues. 

Edge Cases

There are additional configuration steps that may be required depending on your organization’s policies. These could include, but are not limited to the following:

• Not allowing deep links
• Emails over a certain quantity being quarantined
• TLS interception enabled

If this is the case for your organization please reach out to tech-ipm@betterup.co and we will work with you to find a solution. 

Next Step

Learn about program configurations.