Whitelisting K12Panel Domains on Your Network

Whitelisting K12Panel Domains

If your school or district uses a web content filter, firewall, or proxy, allow the domains below so K12Panel works correctly. Blocking any of them can cause login failures, missing map data, broken charts, or the K12Panel Agent being unable to reach the server.

Required Domains

Allow these for every device that uses K12Panel — administrator workstations and managed assets running the Agent.

Conditional Domains

These are needed only for certain configurations.

Important Notes

• Both HTTPS (port 443) and WSS (WebSocket Secure) traffic must be permitted for my.k12panel.com. HTTPS-only rules are not sufficient for the Agent’s real-time WebSocket connection.
• Whitelist each domain individually. Wildcard rules are not a reliable substitute for the specific domains listed here.
• To check whether your filter is blocking something, open my.k12panel.com from a device that is not on your filtered network and compare the behavior, or review your filter’s block logs for the domains above.

Still Having Trouble?

If K12Panel still isn’t working after whitelisting these domains, check the article on configuring your antivirus to work with Panel, or contact K12Panel support.

Common Questions

The app loads but maps and charts are blank — why?
Your filter is likely blocking maps.googleapis.com and www.gstatic.com. Allow both.

Is allowing HTTPS enough for the Agent?
No. The Agent uses a WebSocket (WSS) connection, so WSS to my.k12panel.com must also be permitted.

Can I use a wildcard rule instead of listing each domain?
No. Whitelist each domain individually; wildcard rules are not a reliable substitute.

Do I need the Google or Microsoft domains?
Only if you sign in with that provider — accounts.google.com for Google, login.microsoftonline.com for Microsoft.