All Collections
Naverisk General Guides
Splashtop Security Configuration
Splashtop Security Configuration
Updated over a week ago

Is Splashtop Secure?

Yes, Splashtop’s remote access and remote support solutions are highly secure. All connections are protected with TLS and 256-bit AES encryption. Splashtop’s cutting-edge infrastructure provides a secure computing environment with advanced intrusion prevention and firewalls at multiple layers.

How does Naverisk connect to Splashtop securely?

It uses a token and password to connect to the IP of the device. This as per the diagram below.


The streamer could be used by another third party if they are able to gain details from your client. It is recommended you lock access to the streamer service and there are a number of ways to do this.


Set Privacy settings in Naverisk.

You can set a prompt to pop up on the user’s computer to except a remote connection from naverisk

To enable this from Naverisk, go to settings and remote control and then privacy settings.

Select request permission and then choose save settings.

Set an access password in Streamer.

If you open streamer on a device from the security tab you can set a password.


Once password is saved and you try and connect to the device you will be prompted to enter a password

Restricting access and Allowing Communication with Splashtop Servers

If communication is blocked, please enable your firewalls to allow communication in both directions with these domains:

  • (For global region) *.api.splashtop.com (* represents wildcard)

  • (For EU region) *.api.splashtop.eu (* represents wildcard)

  • (For both) *.relay.splashtop.com (* represents wildcard)

  • (For both) update-g3.splashtop.com / update.splashtop.com / sn.splashtop.com (for endpoints auto-update)

Port 443 needs to be open, including ssl and non-ssl traffic

IP Addresses of Splashtop Servers

Splashtop servers reside in data centers hosted by multiple renowned cloud service providers. The servers' IP addresses are dynamically allocated and change over time. Therefore, it is not practical to configure your firewall exceptions using IP addresses. The list of IP addresses is long, and they may change from time to time. The best way is to configure your firewall exceptions using the wildcard domains above.

If you do need the IP addresses of the Splashtop API servers, you can use the following commands to look up the current IP addresses:


Global region

  • nslookup st-v3.api.splashtop.com

  • nslookup st-v3-g3.api.splashtop.com

  • nslookup st-v3-src.api.splashtop.com

  • nslookup st-v3-src-g3.api.splashtop.com

  • nslookup st-relay-v3.api.splashtop.com

  • nslookup st-relay-v3-g3.api.splashtop.com

  • nslookup st-lookup-v1.api.splashtop.com

  • nslookup st-lookup-v1-g3.api.splashtop.com

  • nslookup st-premium-v3.api.splashtop.com

  • nslookup st-premium-v3-g3.api.splashtop.com

EU region

  • nslookup st-v3.api.splashtop.eu

  • nslookup st-v3-g3.api.splashtop.eu

  • nslookup st-v3-src.api.splashtop.eu

  • nslookup st-v3-src-g3.api.splashtop.eu

  • nslookup st-relay-v3.api.splashtop.eu

  • nslookup st-relay-v3-g3.api.splashtop.eu

  • nslookup st-premium-v3.api.splashtop.eu

  • nslookup st-premium-v3-g3.api.splashtop.eu

  • nslookup st-lookup-v1.api.splashtop.com

  • nslookup st-lookup-v1-g3.api.splashtop.com

IP Addresses of download and auto-update servers for Splashtop endpoints

Splashtop takes advantage of CloudFront service hosted by AWS (Amazon Web Services) to host Splashtop Business and Splashtop Streamer installers. If you need to make sure download and auto-update work without being blocked

Port 80 needs to be open, for downloading new versions of installers from Cloudfront service.


How do I set up Proxy settings in Splashtop Win/Mac Streamer & Win client?

There are several authentication types in existence for the Proxy server. Currently, Splashtop Streamers and Win clients only support the Basic authentication (partially support NTLM). The following list may help you to determine why Splashtop doesn't work in your proxy networking.

Basic authentication (supported)

NTLM (supported starting from Streamer for Windows v2.4.0.1 or later)

Passport (not supported)

Digest (not supported)

Kerberos (not supported)

Win Streamer


PROXY has been supported since Streamer v2.1.0.4. If your computer connects to a network with a Proxy server, please specify the settings in the Splashtop Streamer in the Settings tab (or in the Advanced tab if using v2.2.5.1 or higher) accordingly.


This is the mapping table for Proxy settings between Win Streamer and IE/Control Panel for your reference.

Streamer

IE/Proxy

None

None

Auto

Auto or none

Manual*

Manual*


* If 'Manual' is selected, please also enter the IP / Port / User ID / Password for the Proxy server.

Mac Streamer

Proxy settings for the Mac Streamer are a bit different from the Win Streamer.
Please click the Change settings button in the Advanced tab of the Mac Streamer v2.3.x or later.
This will bring up the related Network window (for Wi-Fi or LAN) as shown in the sample illustration below.

Enter the proper IP / Port / User ID / Password, if your proxy server is not Automatic Proxy Configuration.

You will be required to specify the location of the proxy configuration file in the URL field indicated below if you use Automatic Proxy Configuration.

You will be required to enter the proper IP address, port number, User ID, and password, if you use Secure Web Proxy (HTTPS) as indicated in the illustration below.

NOTE: If your network environment doesn't use any Proxy server, please make sure the related settings (as indicated in the illustration below) are all blank. Sometimes, you may forget to disable these settings, especially when moving your laptop back and forth between home (without proxy) and work (with proxy).

Splashtop Compliance – GDPR, HIPAA, FERPA, SOC 2, and More

More information regarding this can be on the Splashtop website see the link below.

Did this answer your question?