Reflective NLM
Network Diagnostic Tool

Network Diagnostic Tool

Checks whether this device and network can reach all external services required by Reflective NLM.

This tool checks whether the current network can reach all external services required by Reflective NLM. Each service is probed directly from your browser — results reflect what this device on this network can access.

Share this page link with your IT department so they can run it from a school device on the school network to diagnose exactly what is being blocked.

Running… 0 / 0

For IT Departments

Whitelist the following domains in your web filter / proxy / firewall

Reflective NLM is a web application used by your school's students and teachers. For it to function correctly, the network must allow HTTPS (port 443) outbound traffic to the domains listed below. All connections are encrypted and outbound-only.

Core Application

  • *.reflectivelearning.co.zaAll subdomains — HTTPS
  • reflective-learning-prod.web.appFirebase Hosting — HTTPS
  • reflective-learning-prod.firebaseapp.comFirebase Hosting — HTTPS
  • reflective-learning-mc-2.web.appFirebase Hosting — HTTPS
  • reflective-learning-mc-2.firebaseapp.comFirebase Hosting — HTTPS
  • reflective-learning-dashboard.firebaseapp.comMission Control sign-in — HTTPS

Regional API Endpoints

The app looks up which regional cluster an account belongs to when the user signs in, then uses that region for the rest of the session. Both regions must be allowed. A learner's region follows their account rather than the location of the school, so an Australia-hosted account signing in from a South African school still needs the Australian endpoint reachable.

  • directory.reflectivelearning.co.zaRegion lookup at sign-in — HTTPS
  • api-eu.reflectivelearning.co.zaMain API, Europe — HTTPS
  • api-au.reflectivelearning.co.zaMain API, Australia — HTTPS
  • dashboard-api-eu.reflectivelearning.co.zaDashboard API, Europe — HTTPS
  • dashboard-api-au.reflectivelearning.co.zaDashboard API, Australia — HTTPS

Firebase & Google Services (Authentication, Storage, APIs)

  • identitytoolkit.googleapis.comFirebase Auth — HTTPS
  • securetoken.googleapis.comFirebase Auth tokens — HTTPS
  • accounts.google.comGoogle Account Sign-In — HTTPS
  • firebase.googleapis.comFirebase SDK — HTTPS
  • firebasestorage.googleapis.comFirebase Storage — HTTPS
  • storage.googleapis.comGoogle Cloud Storage — HTTPS
  • reflective-learning-prod.firebaseio.comRealtime Database — HTTPS
  • *.appspot.comApp Engine APIs — HTTPS

Supporting Services

  • reflective-learning-features.ew.r.appspot.comFeature flags — HTTPS
  • reflective-learning-prod-mess.nw.r.appspot.comMessaging API — HTTPS
  • reflective-learning-lti.lm.r.appspot.comLTI launches, some schools — HTTPS

CDN & Fonts

  • assets.swarmcdn.comVideo streaming CDN — HTTPS
  • fonts.googleapis.comGoogle Fonts — HTTPS
  • fonts.gstatic.comGoogle Fonts files — HTTPS
  • fonts.cdnfonts.comAdditional fonts — HTTPS

Lingo Vocabulary App

  • learn.lingo.schoolLingo app — HTTPS
Note: If your firewall uses SSL inspection (HTTPS deep packet inspection), you may need to add these domains to the SSL inspection bypass list as well. Reflective NLM uses TLS 1.2+ and certificate pinning may interfere with inspection.
For further assistance, contact Reflective NLM support: [email protected]

Live Latency Monitor

Measures HTTP round-trip time to core services every 3 s — gaps indicate packet loss

Press Start to begin monitoring