This is the list of addresses that are accessed by Devolutions Server during normal operation, as well as the setting(s) to disable/prevent this access.
We use a "best effort" approach to maintain this list, but it does NOT replace proper IT security practices. If security is paramount, it would be better to first block all internet access, then allowlist desired addresses as needed.
Endpoints List
| Description | URL | Related Setting(s) / Action |
|---|---|---|
| Devolutions Server update check | https://devolutions.net | Devolutions Server Console – Support – Check for Updates |
| Devolutions Server update - package download | https://cdn.devolutions.net | User action in the upgrade available dialog |
| Block Tor clients | https://cloud.devolutions.net | Administration – Server Settings – Features |
| Azure Authentication | https://login.microsoftonline.com https://graph.microsoft.com |
Administration – Server Settings – Authentication – Microsoft Authentication |
| Okta Authentication | https://< domain >.okta.com | Administration – Server Settings – Authentication |
| PAM - Provider Azure | https://graph.microsoft.com | Azure type PAM Provider |
| Telemetry | https://telemetry.devolutions.net | Administration – Server Settings – Features – Share anonymous usage data with Devolutions |
| Have I Been Pwned | https://api.pwnedpasswords.com | Administration – Server Settings – Features – Enable compromised (pwned) check |
| Push Notification | https://login.devolutions.com https://api.devolutions.com |
Administration – Server Settings – Features – Enable Devolutions Workspace Push Notification |
| Slack Integration | https://slack.com | Administration – Server Settings – Logging – Slack Integration |
| SMTP, Authentication Azure | https://graph.microsoft.com | Administration – Server Settings – Email – Authentication type |
| Geo IP | https://geoip.maxmind.com | Administration – Server Settings – GeoIP Security |
| Gravatar | https://secure.gravatar.com | Administration – Server Settings – Features – Enable Gravatar |
| Yubikey | https://api.yubico.com https://api2.yubico.com https://api3.yubico.com https://api4.yubico.com https://api5.yubico.com |
Administration – Server Settings – Multi-factor |
| Twilio | https://api.twilio.com | Administration – Server Settings – Multi-factor – SMS |
| Duo | https://api.<>.duosecurity.com | Administration – Server Settings – Multi-factor |