PSI Secure Browser - Revision history

Chris: /* Configuration */ Adding information about the PSI Secure Browser override.Chris

2025-12-11T12:58:50Z

Configuration: Adding information about the PSI Secure Browser override.Chris

← Older revision		Revision as of 13:58, 11 December 2025
Line 3:		Line 3:

	== Configuration ==		== Configuration ==
	Exams this year for the Psi Browser ~~seem~~ to ~~need~~ the following ~~uri's in the Disable HTTPS Decryption override~~:		Exams this year for the Psi Browser have changed again to the following:

	psiexams.com		psiexams.com
Line 10:		Line 10:

	ably-realtime.com		ably-realtime.com

			main.realtime.ably.net

			We have created an override to use so you don't have to add these sites to a site wide override of Disable HTTPS Decryption.

			To apply the override, go to:

			UTM -> Web -> Overrides and Walled Garden -> Select the group you want to apply the override to.

			Click Add Override, and select App: Psi Secure Browser say OK.

			Then Click Save Configuration.

	You will also need to set the Twilio Video rule bundle to allow on the Egress tab under the Firewall for the users/subnets that are wanting to use the psi browser.		You will also need to set the Twilio Video rule bundle to allow on the Egress tab under the Firewall for the users/subnets that are wanting to use the psi browser.

Chris: /* Configuration */

2024-07-29T11:08:55Z

Configuration

← Older revision		Revision as of 12:08, 29 July 2024
Line 3:		Line 3:

	== Configuration ==		== Configuration ==
	No configuration ~~required~~.		Exams this year for the Psi Browser seem to need the following uri's in the Disable HTTPS Decryption override:

			psiexams.com

			ably.io

			ably-realtime.com

			You will also need to set the Twilio Video rule bundle to allow on the Egress tab under the Firewall for the users/subnets that are wanting to use the psi browser.


			Client configuration to consider: The user must be able to run the psi browser as administrator and be able to have access to a webcam and microphone.

	== Detail ==		== Detail ==

Steve at 11:27, 14 October 2022

2022-10-14T11:27:30Z

← Older revision		Revision as of 12:27, 14 October 2022
Line 23:		Line 23:
	The following log summarises discussions with PSI regarding the problems listed above.		The following log summarises discussions with PSI regarding the problems listed above.

	* [[PSI Secure Browser/ContactLog/2022-03-24\|~~2022-03-24]] -~~ Reported to PSI.		{{Contact Log Link\|date=2022-03-24\|summary=Reported to PSI}}
	* 2022-05-25 - Reported to ABRSM.		{{Contact Log Link\|date=2022-05-25\|summary=Reported to ABRSM}}

	[[Category:Third Party Software Compatibility]]		[[Category:Third Party Software Compatibility]]

Steve: /* Vendor Contact Log */

2022-10-13T15:16:31Z

Vendor Contact Log

← Older revision		Revision as of 16:16, 13 October 2022
Line 23:		Line 23:
	The following log summarises discussions with PSI regarding the problems listed above.		The following log summarises discussions with PSI regarding the problems listed above.

	* 2022-03-24 - Reported to PSI.		* [[PSI Secure Browser/ContactLog/2022-03-24\|2022-03-24]] - Reported to PSI.
	* 2022-05-25 - Reported to ABRSM.		* 2022-05-25 - Reported to ABRSM.
	[[Category:Third Party Software Compatibility]]		[[Category:Third Party Software Compatibility]]

Steve at 14:03, 13 October 2022

2022-10-13T14:03:02Z

← Older revision		Revision as of 15:03, 13 October 2022
Line 25:		Line 25:
	* 2022-03-24 - Reported to PSI.		* 2022-03-24 - Reported to PSI.
	* 2022-05-25 - Reported to ABRSM.		* 2022-05-25 - Reported to ABRSM.
			[[Category:Third Party Software Compatibility]]

Steve: Created page with "== Status == We cannot guarantee that PSI Secure Browser will work through an Opendium system. When a school reports problems using this software, we are usually able to work with them to adjust their configuration to allow it to work, but in our experience it is very likely to stop working again in the future. == Configuration == No configuration required. == Detail == PSI Secure Browser is a piece of software used by exam boards such as [https://abrsm.org ABRSM], to..."

2022-10-13T14:02:39Z

Created page with "== Status == We cannot guarantee that PSI Secure Browser will work through an Opendium system. When a school reports problems using this software, we are usually able to work with them to adjust their configuration to allow it to work, but in our experience it is very likely to stop working again in the future. == Configuration == No configuration required. == Detail == PSI Secure Browser is a piece of software used by exam boards such as [https://abrsm.org ABRSM], to..."

New page

== Status ==
We cannot guarantee that PSI Secure Browser will work through an Opendium system. When a school reports problems using this software, we are usually able to work with them to adjust their configuration to allow it to work, but in our experience it is very likely to stop working again in the future.

== Configuration ==
No configuration required.

== Detail ==
PSI Secure Browser is a piece of software used by exam boards such as [https://abrsm.org ABRSM], to provide exams to students. Unfortunately, schools are provided with very little information regarding firewalling and filtering changes that they need to make to allow PSI Secure Browser to work on their networks.

Although there is a [https://helpdesk.psionline.com/hc/en-gb/articles/360055813952-RPNow-List-of-Websites-to-Whitelist-on-your-Anti-Virus-Applications whitelist available], this is not comprehensive and PSI Secure Browser appears to require access to a number of other hosts which are not listed on that website. The whitelist also recommends whitelisting ''all'' content which is hosted through Amazon AWS. As Amazon AWS hosts an enormous amount of content for all manner of organisations, including content which is unsafe, we believe that a school would be negligent were they to follow these recommendations.

Whilst a network test service is available, this does not appear to comprehensively test all of the requirements for the exams, and we therefore have numerous cases of schools believing that everything is set up to work and then only discovering that it doesn't work when the exam starts. There does not seem to be a way to comprehensively test that PSI Secure Browser will work for an exam until the exam is actually in progress.

We have also identified bugs in PSI Secure Browser which result in it being left in a broken non-functional state if challenged for authentication by the proxy.

Without comprehensive information regarding PSI Secure Browser's technical requirements, we have to reverse engineer it by examining its network traffic in order to create a configuration which will work. Unfortunately, we have seen that its technical requirements frequently change, and therefore a configuration which works now will likely not work in the future.

In order to produce a stable configuration that would allow this software to work, we would require a more comprehensive list of its technical requirements. However, our attempts to open a dialogue with [https://www.psionline.com PSI] and to report the bugs in their software have been completely ignored.

Whilst we recognise that schools have little choice but to use whatever software the exam boards dictate, we feel that schools should be feeding back these problems to the exam boards so that they can put pressure on the software vendors to behave responsibly.

== Vendor Contact Log ==
The following log summarises discussions with PSI regarding the problems listed above.

* 2022-03-24 - Reported to PSI.
* 2022-05-25 - Reported to ABRSM.