Tradeweb U.S.
Installation Notes
TRADEWEB CONFIDENTIAL
Page 1
March 20, 2017
Table of Contents
Introduction ............................................................................................................................... 2
Tradeweb Diagram .................................................................................................................... 3
Summary.................................................................................................................................... 4
Configuration Screens................................................................................................................ 5
Connectivity over the Internet ................................................................................................... 6
Tradeweb’s Technology ......................................................................................................... 6
Tradeweb’s Internet Service Providers .................................................................................. 6
Internet Performance and Reliability ..................................................................................... 6
The Tradeweb Viewer ................................................................................................................ 7
Tradeweb Security ..................................................................................................................... 7
SecurID Authentication (if required) .......................................................................................... 7
Running the Windows Installer .................................................................................................. 9
Network Installation of the Viewer .......................................................................................... 11
Network Requirements............................................................................................................ 12
Proxy Servers ........................................................................................................................... 12
Configuring Firewalls ............................................................................................................... 12
Version 8.0 and Higher Chromium Software ........................................................................... 12
Troubleshooting Connectivity .................................................................................................. 15
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 2
March 20, 2017
Introduction
This document is intended for a system administrator that is responsible for installing third-
party software on your network. It provides instructions on how to install and configure the
Tradeweb Viewer, and the network changes required to connect to Tradeweb services.
Please call Tradeweb Client Services at 800-541-2268 if you have any questions.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 3
March 20, 2017
Tradeweb Diagram
Tradeweb Viewer Tradeweb Security Steps to Get Connected
The Tradeweb Viewer is a small Customers must register their IP 1. Your machine must be able to reach
client program that runs on your addresses with Tradeweb’s firewall Tradeweb’s registered addresses at
desktop PC. It may be and user database. Each Tradeweb TCP port 443 or 3520, and Tradeweb’s
downloaded from Tradeweb’s user is assigned a unique username registered URLs in the
website, [Link]. and password. The username, [Link] subdomain.
The Viewer initiates an outbound password and customer’s IP address 2. Call Tradeweb Client Services on 800-
TCP/IP Connection to Tradeweb must all match to be authenticated 541-2268 to get the username and
Servers at port 443 or 3520 and by Tradeweb. The session between password to download the Tradeweb
Tradeweb Servers in the the Tradeweb Viewer and the Viewer. They will ask you to provide
[Link] Tradeweb Server is encrypted using your external IP address if applicable.
subdomain. The Tradeweb SSL. The public/private and session 3. Once the software has been installed
Viewer displays real-time keys are unique per session. and configured correctly, Tradeweb
indicative prices from the largest Client Services can train your users
dealers for a range of products. and help them to log in and start using
It offers interactive and the system.
simultaneous trading with
multiple dealers The Viewer is
easy to install and use.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 4
March 20, 2017
Summary
The Tradeweb Viewer makes its primary connection to the Tradeweb Servers using a point-to-
point TCP/IP socket protocol. User authentication and access to most Tradeweb functionality
occurs through this connection. The Viewer will make a second connection using HTTPS and
WebSockets protocols to Tradeweb Servers to display HTML-rendered content for newer
functionality including the US Credit, ETF, and CDS Single Name products. There is also a
small subset of non-critical functionality that requires Flash support. Please note that support
of Flash is not a requirement to run the Tradeweb Viewer.
Primary Viewer Connection
Tradeweb will need to register your users’ external IP addresses (if this is not
possible, please see the SecurID Authentication (if required) section later in this
document)
Users need to be able to connect to the following IP addresses over Port 443 or 3520
(and 259 for SecurID users):
Production System Demo System
Application (Internet) [Link] [Link]
Application (private) [Link] [Link]
Firewall Server Support [Link] (port 259) [Link] (port 259)
HTML-Rendered Content
The latest versions of the Tradeweb Viewer are enabled to provide HTML-rendered content
through a second connection that targets an URL in the [Link] subdomain. Please
ensure that traffic on this new connection follows the same path as existing Tradeweb traffic,
as follows:
If Tradeweb traffic targeting IP [Link] is configured to bypass your web
proxy, then please also bypass your web proxy for all traffic to subdomains of
[Link] ([Link] in the [Link]/24 range.
If Tradeweb traffic targeting IP [Link] is configured to connect through a web
proxy, then please whitelist all subdomains within [Link] on this web proxy
([Link]
If you are connecting over a private line, please see additional notes under the “Network
Installation of the Viewer” section regarding DNS resolution for a private connection. Additional
configuration is outlined under “US Name Resolution Guide for the Tradeweb Viewer (over
private line)”.
Flash-Based Content Dependencies
Access to the URL:
[Link]
Adobe Flash Player version 9.0.28 or higher ([Link] or higher recommended)
Internet Explorer 6 SP2 or higher, with the following settings:
o JavaScript is enabled
o ActiveX controls are enabled and allowed to be scripted
Microsoft Office 2003 or higher
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 5
March 20, 2017
Configuration Screens
To view the configuration page, launch the Tradeweb application and select:
HelpAbout TradewebConfigure
US Production (example)
Configuring the system to connect via a Proxy: Check the box for “Enable SSL Tunneling”
and for “Use IE SSL Settings” if you use the same proxy settings in IE to connect. See Notes
on SSL Tunneling Server settings section later in this document for more information.
Configuring the system to connect by manually entering in your Proxy: Just check
“Enable SSL Tunneling” and enter your proxy address in the IP address field under Enable
SSL Tunneling. Please also enter your Port as 80 or 8080 select “Okay”, then re-launch
Tradeweb.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 6
March 20, 2017
Connectivity over the Internet
Historically, customers have been given several connectivity options. Customers have voted
overwhelmingly to connect over the Internet with excellent results. As a testament to its
popularity, Tradeweb has already traded trillions of dollars of fixed income instruments over
the public Internet.
Tradeweb’s Technology
Tradeweb’s technology is based on a client/server architecture that uses industry standard
protocols and tools. The Tradeweb Viewer is an intelligent client program that runs on the
most popular platforms used by the financial community—Microsoft Windows XP, Vista,
Windows 7, 8, and 10. The data transmission between the Viewer and its Server has been
highly optimized for Internet delivery—only the data that is required to be sent, is transmitted.
Note: As with any Internet service, the reliability and performance will vary depending on a
number of factors including the quality of service provided by your Internet Service Provider
(ISP), the speed of your connection, and overall conditions on the Internet.
Tradeweb’s Internet Service Providers
Tradeweb has carefully selected its Internet Service Providers (ISPs) to provide the most
reliable service available today to its Internet customers. Using only 'tier 1' Internet backbone
ISPs in a 'multi-homed' architecture, Tradeweb provides fully resilient connectivity on all
published addresses.
Internet Performance and Reliability
If your ISP is one of the major carriers that have peering relationships with the established
backbone providers you will have excellent performance to Tradeweb. Your traffic will be
routed through their internal networks or over private peering connections, and never hit the
public Internet. As for the other carriers, their reliability and performance will vary depending
on how they are connected to the Internet, the speed of their backbones and the overall
robustness of their network infrastructure. Of course, the quality and speed of your connection
to your ISP are also very important factors to your overall quality of service.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 7
March 20, 2017
The Tradeweb Viewer
The Tradeweb Viewer is a small program that runs on the customer’s workstation. It is the
client portion of Tradeweb’s client/server electronic trading application. The software may be
installed on an individual workstation or on a network file server.
The Tradeweb Viewer requires a network path from the client workstation to the Tradeweb
datacentre and communicates with Tradeweb-hosted servers. The Viewer initiates an
outbound, encrypted session from your network to the Tradeweb servers at specific registered
IP addresses and pre-defined ports.
The software is available from a protected area on our website. Call Tradeweb Client Services
for download instructions and privileges.
Tradeweb Security
All Tradeweb users are assigned a unique username and user-specified password. Only
authorized users may gain access to the Tradeweb system.
In addition to the username and password, Tradeweb also requires that the user’s IP address
be registered to Tradeweb’s firewall. The user’s network address will be checked by Tradeweb
to verify that it is valid. The username, password and IP address must all match to be
authenticated by Tradeweb’s security.
Once authenticated, the Viewer establishes a session with a Tradeweb Server. This session is
encrypted using SSL. Each session is assigned a unique set of encryption keys.
SecurID Authentication (if required)
SecurID, a popular security product by Security Dynamics, offers the highest level of
authentication, called a two-factor authentication.
One factor of the security is ―what you have. A physical SecurID device that displays a
password that changes every minute, available as a credit card like device. Only an authorized
user will have this physical device.
The second factor is ―what you know. Each user is assigned a PIN number that is linked to
the SecurID device, which are both registered with Tradeweb’s firewall. Only the authorized
user should know his/her PIN number. It functions similarly to your bank PIN number that is
tied to your ATM card, which is registered with the bank’s authentication system. You should
always keep your PIN number a secret.
Two factor authentication offers Tradeweb and its customers a very high level of security. If
you lose your SecurID, the person that finds it won’t know your PIN. So he/she cannot get into
the system. If you compromise your PIN—which you shouldn’t since it should be committed to
your memory only—the person that discovers your PIN will not have your SecurID device.
Another SecurID will not work, since it is not linked to your PIN nor is it registered with
Tradeweb’s firewall.
Users of SecurID must enter a special passcode when prompted for a password by the
Tradeweb Viewer. The passcode is composed of your PIN and the password displayed on the
SecurID device (Passcode = SecurID-Pin+Displayed-Password). You must enter both as one
entry when the Viewer prompts you. For example, if your PIN is 3845 and the displayed
SecurID password is 751616, enter for passcode: 3845751616
Occasionally, if by accident you enter the wrong passcode a number of times, Tradeweb’s
firewall may interpret this as suspicious behavior. As a defense mechanism, even after
entering the correct passcode, the Viewer may prompt you for another passcode, called the
―next passcode. If this happens, you will have to wait for the SecurID device to display
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 8
March 20, 2017
another password. This may take up to a minute. When the displayed password changes, just
enter new passcode on the token. SecurID is offered by Tradeweb as an optional service.
Please contact Tradeweb Client Services for more information.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 9
March 20, 2017
Running the Windows Installer
The Windows Viewer works with Windows XP, Vista and Windows 7, 8, and 10. The Windows
Installer is packaged in the latest version of the software, available from Tradeweb’s website,
[Link]. The installation program is in a protected area of the website. Please call
Tradeweb Client Services at 800-541-2268 for download instructions and privileges.
There are two versions of the installation program, one version for Tradeweb’s Production
system for live trading, and a demo version for simulated trading. We recommend that new
users download the demo version first. After being trained on the system, you may download
and install the production version. We recommend keeping the demo version of the Viewer on
your desktop in order to preview system enhancements, to practice trading or show it to others
without doing live trades.
Examples of the installation program file names are:
[Link] (Demonstration version)
[Link] (Production version)
During the Installation you will be asked to select from 4 options:
Choose:
Internet for connection via an Internet or Broadband connection with a permanent IP address
or range of addresses
Internet Dial Up for connection via a dialup or Broadband connection with a temporary IP
address
Private Network for connection via a leased line or private network
Reuters MPLS/RXN Network for connection via an existing connection provided by Thomson
Reuters.
Clients wishing to connect over a private network or an existing TR connection should contact
Tradeweb Client Services for more information. If the defaults are accepted, the installation
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 10
March 20, 2017
program will create a sub-folder in the Program Files folder called TWDemo or TWLive, and
will create an icon on your desktop.
Before running the Tradeweb Viewer you will need your username and password. Please
contact Tradeweb Client Services at 800-541-2268 or at help@[Link] if you don't
already have a login.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 11
March 20, 2017
Network Installation of the Viewer
The Tradeweb Viewer may be installed on your network. The Viewer executable, bitmaps, and
configuration files should be located in a folder on a shared network file server that is
accessible by Tradeweb users.
1. Set the [Link] file to be read only, so users cannot change the machine addresses.
2. Add the User attribute to the Directories section of the INI file and set it to a unique
directory available on all machines running the network mounted Viewer executable. The
User attribute is used by the Viewer to determine where to store the bookmark data file
([Link]) and any files downloaded by the Viewer such as blotter down load files and ftp
downloaded files. This directory MUST be a location that is unique to the individual user or
else other users will overwrite the bookmark file; typically a local hard disk (e.g. C:\) is
used. Where roaming profiles are in use you should specify a drive mapped to a specific
user directory (e.g. U:\, where U:\ maps to a server based user folder, such as
\\Server\Users\Username). The version of the Viewer available on the web site does not
include the User attribute although it does have the Directories section defined.
3. Ensure that the CacheDir attribute in the Downloading section of the INI file is set to a
shared network drive to which all users have full read/write/create access.
Sample [Link] file extracts: [Directories] User=c:\tradeweb or [Directories]
User=c:\windows\temp or [Directories] User=u:\
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 12
March 20, 2017
Network Requirements
The Tradeweb Viewer initiates an outbound encrypted TCP/IP socket connection from your
network to the Tradeweb Servers and, when necessary, an additional outbound encrypted
HTTPS and WebSocket connection from your network to the Tradeweb Servers. Tradeweb
never initiates a connection into your network. Also, the Viewer only knows how to connect to
the Tradeweb Server IP addresses at well-defined ports. To gain access to Tradeweb
services, your network must be able to reach Tradeweb’s registered addresses as follows
depending on your form of connectivity:
Production System Demo System
Internet Connectivity [Link] (port 443, 3520) [Link] (port 443, 3520)
Private Line Connectivity [Link] (port 443, 3520) [Link] (port 443, 3520)
SecurID Connectivity [Link] (port 259) [Link] (port 259)
[Link] (port 3521) [Link] (port 3521)
Tradeweb will have to register your IP addresses to its firewall. Please call Tradeweb Client
Services on 800-541-2268 to coordinate. Internet users may perform the following test to see
if they have connectivity to Tradeweb: telnet [Link] 443 (telnet into Tradeweb’s
application)
Proxy Servers
For customers wishing to employ proxy servers within their networks to access Tradeweb
applications, we recommend that they investigate deploying standard “off the shelf'
commercial products. While Tradeweb does not specifically endorse any particular software
vendor, we will be happy to assist in the configuration of your chosen product.
The “SSL Tunneling Server” section of the configuration page allows details of a HTTP proxy
server to be specified where external connectivity is required through a proxy server.
Configuring Firewalls
Where a firewall is in use you may need to configure rules to allow Tradeweb viewers to
connect. For example:
Source Destination TCP Port
Your_viewers [Link] 443 or 3520
Your_viewers [Link] 443 or 3520
Where Your_viewers is an object that specifies the workstations running the Tradeweb Viewer
software.
TCP port 443 and 3520 are normally permitted by firewalls for SSL connectivity, but may
require additional permissions to be set on firewalls, routers or proxy servers. SecurID users
may require TCP ports 259 to be permitted through their firewalls.
Version 8.0 and Higher Chromium Software
Viewer versions 8.0 and higher include an embedded version of Chromium software which is
used by the viewer to show Tradeweb specific HTML content. It is not a general purpose web
browser. This content is retrieved through an additional connection from the Viewer to a
Tradeweb Server in the [Link] subdomain. Any network configuration to
support connectivity to the primary Tradeweb services at the destination IP(s) in the sections
above must also be applied to any service in the [Link] subdomain. For
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 13
March 20, 2017
connections over a private line, additional configuration changes will be required to support
name resolution detailed at the end of this section.
Verifying Connectivity to HTML-Rendered Content
Successful configuration can be confirmed by accessing the new My View page available at
the top of the left-navigation menu. If you’re unable to access My View, there is a diagnostic
tool available to assist with troubleshooting. From the Viewer, type NEWUIDIAG into the
command line at the top left. Once the diagnostic test completes, please take a screenshot of
the page, copy the contents of the Log tab into an email, and send to Customer Relations at
Help@[Link]. Below is an example screenshot of a successful diagnostic test:
US Name Resolution Guide for the Tradeweb Viewer (over private line)
HTML-Rendered content relies on DNS resolution, which needs to resolve for the following 4
zones:
[Link]
[Link]
[Link]
[Link]
There are 2 ways to force the traffic over your private lines to Tradeweb (if not this traffic will
use the internet):
1. Implement forwarder on your DNS to Tradeweb Private DNS [Link] (UDP 53).
You will need to forward for the 4 zones stated above.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 14
March 20, 2017
2. Create the sub-domain on your internal DNS for 4 zones above, and add the following A
records:
*.[Link] [Link]
*.[Link] [Link]
*.[Link] [Link]
[Link] [Link]
Notes:
If you NAT the Tradeweb range ([Link]/24) internally you will need to adjust these
IPs to the ones you allocated internally.
The new viewer functionality utilizes DNS resolution and applies connectivity settings from
Internet Explorer. Your administrators may need to modify these settings to ensure that
connectivity utilizes the Tradeweb private connections and may require bypass of your
internal Internet web proxy.
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 15
March 20, 2017
Troubleshooting Connectivity
Viewer Cannot Connect
If you receive the error message “Viewer Cannot Connect to Server. Will try again later…” OR
“Connecting to Proxy Server 1, 2,…”
Solutions
Go to [Link] and provide Tradeweb with the IP address generated. You
may email us at help@[Link]. (We may not have your IP address registered to
our firewall)
Go to Help About Tradeweb Configure and change Port numbers in servers 1-4
from 443 to 3520 Okay. Then re-launch Tradeweb.
If connecting through a proxy, please go to Help About Tradeweb Configure and
just check “Enable SSL Tunneling” and type in your proxy address in the bottom left hand
box. Enter your Port as 80 or 8080 in the Port field in the bottom right hand corner of the
configuration screen Okay, and then re-launch Tradeweb.
If you are using the same proxy settings to connect to IE, you may check both “Enable
SSL Tunneling” and “Use IE SSL Settings” – Please note this, if these two boxes are
check, the application will ignore what is manually put in as the IP and Port and
automatically use your IE proxy settings to try to connect.
Please also be sure that your network is allowed to connect to Tradeweb’s destination IP
addresses as outlined earlier in this document.
If none of the above were able to help you connect, please be sure that the changes you
are making to the Configuration page are sticking. You may need Admin Rights to make
the changes on the configuration page stick permanently.
Please call us at 800-541-2268 or email us at help@[Link] to help you
troubleshoot further. Please be sure to provide us with your external IP address.
Not Authorized to Login
If the “Not authorized to login from this Network” error message is received when attempting
to log in to the system:
Solutions
You may be logging into the wrong environment. For example, logging into Production
using your Demo credentials. Or you may be logging into the EU software when you need
to be using the US software.
You are attempting to login from an IP address that is not registered in the Tradeweb user
database. Please contact us at 800-541-2268 or email us at help@[Link] to
confirm the location in which you’re logging in from.
Cannot Connect to Web Services
If you are only having issues accessing the HTML-rendered content, it may be an issue with
your proxy configuration. HTML-rendered content will NOT use the proxy in which it has setup
for the primary Tradeweb connection. You may specify the proxy in which you would like the
Tradeweb US Installation Notes CONFIDENTIAL March 2017
TRADEWEB CONFIDENTIAL
Page 16
March 20, 2017
user to connect for HTML-rendered content in the Tradeweb INI file. Under the [Release]
section of the INI file, please be sure you add the below:
If using PAC configuration:
ChromiumProxyType=pacscript
ChromiumProxyConfig=[Link] IP ADDRESS:YOUR PORT/[Link]
If using an IP configuration:
ChromiumProxyType=named
ChromiumProxyConfig=[Link] IP ADDRESS:YOUR PORT
Tradeweb US Installation Notes CONFIDENTIAL March 2017
