Disable or restrict access to Bluebeam services

To keep end users at your organization from accessing Studio, your IT/system admin can close the ports in your firewall or proxy server that are required for Studio connections. The hosts and port numbers are:

• *.bluebeam.com:443
• *.amazonaws.com:443

Revu is proxy aware, so be sure to deselect Force Proxy Use in Revu > Preferences > Studio to disable the option before closing ports for your firewall or proxy server.

Administrators can deploy a registry key to Revu client systems to control Studio server access. If your organization needs to disable Studio access, you can create an empty allowlist. If your organization uses Studio Enterprise, you can create an allowlist of allowed servers, such as your internal server URL, while restricting access to external servers like studio.bluebeam.com.

1. Open the Windows Registry Editor.
2. Navigate to

   Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Bluebeam Software

3. Right-click the Bluebeam Software folder and select New > Key.
4. Name the key Revu.
5. Right-click the Revu folder and select New > Key.
6. Name the key Studio.
7. Right-click the Studio folder, select New > String Value.
8. Enter AllowedServers as the value.
9. Right-click AllowedServers, select Modify, and enter your server URL as the value data.
   Leave the value blank if you need to disable access to Studio. Users will not be able to create or delete servers in Revu.
   • Do not include https:// in the server name.
   • Separate multiple server URLs with a comma and no spaces. For example, serverURL.com,studio.bluebeam.com.

Features:

• All Fields in the 'Manage Server' dialog in Revu will be disabled.
• Resetting preferences for Revu preserves the allowlist.
• Accessing a Studio link for servers generates an error.

Force Windows Authentication mode

Owners of private Studio Enterprise servers also have the option of forcing users to log in to your Studio Enterprise servers with Windows Authentication instead of entering a username and password in the software. Once configured, users will not be able to override these settings in Revu.

1. Open Registry Editor.
2. Navigate to

   Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Bluebeam Software

3. Right-click the Studio folder and select New > DWORD (32-bit) Value.
4. Enter WindowsAuthenticationOnly as the value.
   This value is case sensitive.
5. Right-click WindowsAuthenticationOnly, select Modify, and set the Value to 1.

Features:

• All fields of the Login dialog are disabled. Windows Authentication is enabled and cannot be disabled.
• All fields in Edit server dialog are disabled. Windows Authentication is enabled and cannot be disabled.
• Generates error for servers that do not support Windows Authentication.
  Studio functionality will be disabled in Revu unless the Bluebeam Studio URL (studio.bluebeam.com) or your internal Studio Server URL has been entered as described above.

Export this Studio registry key and deploy it to client systems. Set permissions accordingly to prevent users from making changes to the registry key.

Disable access to Studio

To disable access to Studio entirely, create an allowlist and leave the Studio URL blank.