Many Hands-on Labs require an SSH or RDP connection to a remote server.
If you have a firewall or a software that limits your connection, you should create some rules and permit the following ports: 22 (TCP) and 3389 (TCP and UDP).
If you need to permit IP ranges, and require more information about Amazon's IP, click here:
You can also consider using a remote virtual machine or a VPN and skipping the filters.
For example, AWS Workspaces (https://aws.amazon.com/workspaces/) can permit you to use SSH or RDP for our Labs.