These are the lists of addresses that are accessed by Devolutions Server and the Devolutions Server Console during normal operation, as well as the setting(s) to disable/prevent this access.
We use a "best effort" approach to maintain this list, but it does not replace proper IT security practices. If security is paramount, it would be better to first block all internet access, then allowlist desired addresses as needed.
Devolutions Server endpoints list
| Description | URL | Related setting(s) / action |
|---|---|---|
| Devolutions Server update check | https://devolutions.net | Devolutions Server Console – Support – Check for Updates |
| Devolutions Server update - package download | https://cdn.devolutions.net | User action in the upgrade available dialog |
| PAM - Provider Azure | https://graph.microsoft.com | Azure type PAM Provider |
| Azure Authentication | https://login.microsoftonline.com https://graph.microsoft.com |
Administration – Server Settings – Authentication – Microsoft Authentication |
| Okta Authentication | https://< domain >.okta.com | Administration – Server Settings – Authentication – Okta Authentication |
| SMTP, Authentication Azure | https://graph.microsoft.com | Administration – Server Settings – Email – Authentication type |
| Slack Integration | https://slack.com | Administration – Server Settings – Logging – Slack Integration |
| Licenses | https://api.devolutions.com | Administration – Server Settings – Features – Enable Internet Access |
| Gravatar | https://secure.gravatar.com | Administration – Server Settings – Features – Enable Gravatar |
| Have I Been Pwned | https://api.pwnedpasswords.com | Administration – Server Settings – Features – Enable compromised (pwned) check |
| Block Tor clients | https://cloud.devolutions.net | Administration – Server Settings – Features – Block Tor clients |
| Telemetry | https://telemetry2.devolutions.net:9200 | Administration – Server Settings – Features – Share anonymous usage data with Devolutions |
| Push Notification | https://login.devolutions.com https://api.devolutions.com |
Administration – Server Settings – Features – Enable Workspace Push Notification |
| Devolutions Send | https://send.devolutions.com | Administration – Server Settings – Features – Allow users to send password with Devolutions Send |
| Yubikey | https://api.yubico.com https://api2.yubico.com https://api3.yubico.com https://api4.yubico.com https://api5.yubico.com |
Administration – Server Settings – Multi-factor |
| Twilio | https://api.twilio.com | Administration – Server Settings – Multi-factor – SMS |
| Duo | https://api.<>.duosecurity.com | Administration – Server Settings – Multi-factor – Duo |
| Geo IP | https://geoip.maxmind.com | Administration – Server Settings – GeoIP Security |
Devolutions Server Console endpoints list
| Description | URL | Related setting(s) / action |
|---|---|---|
| Devolutions Server script installation | https://api.devolutions.net https://iis.net https://dotnet.microsoft.com |
Devolutions Server service installation |
| Devolutions Server (instance and scheduler) and Devolutions Gateway installation | https://devolutions.net https://redirection.devolutions.com |
Create a Devolutions Server instance Devolutions Gateway configuration with Devolutions Server |
Give us Feedback