Tech Implementation - Mursion Magic

Before You Begin

Before configuring firewall or network settings, please review the following end-user technical requirements, including supported browsers, device requirements, and webcam and microphone requirements. 

Please review the full learner technology requirements here

Network & Firewall Planning

Mursion simulations use real-time audio and video communication technologies that require both TCP and UDP traffic to be permitted through organizational firewalls and network security tools.

Because network environments often differ across users and locations, we strongly recommend reviewing the following considerations before deployment.

Questions to Consider

Learner Location & Network Environment

• Are learners joining from a centralized location such as an office or training center?
• Are learners joining from multiple locations with different network configurations?

Firewall Configuration

• Do different learner groups or office locations use different firewall policies?
• Are there separate security configurations across departments or cohorts?

VPN Usage

• Will learners connect through a VPN?
• Does the VPN environment use different firewall or filtering rules than non-VPN traffic?

Firewall & WebRTC Requirements

Please ensure that your organization’s network allows outbound traffic to the domains, IP addresses, and ports listed below.

While Mursion traffic is initiated from within your organization’s network, return inbound traffic must also be permitted in response to those outbound connections.

Additionally, ensure that your network security tools, firewalls, proxies, or content filters do not block WebRTC traffic to or from the destinations listed below. Some filtering solutions may interfere with WebRTC communications even when required ports are open.

For the best audio and video quality, we strongly recommend allowing UDP traffic on the ports listed below.

Human-powered simulations

To test your ability to connect to Mursion's AI simulations, use this link to complete a test. If you receive Pass for all steps, then you will encounter no issues connecting to your AI simulations. At this time, we do not have a connection test available for human-powered simulations. 

Zscaler SSL Inspection Configuration

Organizations using Zscaler must configure SSL inspection bypasses for the following Mursion services.

The following destinations must be excluded from SSL inspection:

For TURN server destinations, both the fully qualified domain name (FQDN) and the corresponding IP address must be added to the SSL inspection exemption list.

WebSocket

• • portal.mursion.com
  • magictest-signaling.mursion.com

HTTPS

Email Server

Allow email from the following addresses and domains in your email server / spam filter:

Security Checklist

If your IT team needs to review our security documentation before a Mursion program launch. These documents may be helpful:

• SOC 3 Summary
• Mursion's Penetration Test Executive Summary
• Security One-Pager
• HECVAT for Higher Education Clients
• Mursion's Privacy Notice