List of Internet Endpoints Accessed by Devolutions Server

This is the list of addresses that are accessed by Devolutions Server during normal operation, as well as the setting(s) to disable/prevent this access.

We use a "best effort" approach to maintain this list, but it does NOT replace proper IT security practices. If security is paramount, it would be better to first block all internet access, then allowlist desired addresses as needed.

Endpoints List

Description URL Related Setting(s) / Action
DVLS update check https://devolutions.net Devolutions Server Console – Support – Check for Updates
DVLS update - package download https://cdn.devolutions.net User action in the upgrade available dialog
Block Tor clients https://cloud.devolutions.net Administration – Server Settings – Features
Azure Authentication https://login.microsoftonline.com
https://graph.microsoft.com
Administration – Server Settings – Authentication – Microsoft Authentication
Okta Authentication https://< domain >.okta.com Administration – Server Settings – Authentication
PAM - Provider Azure https://graph.microsoft.com Azure type PAM Provider
Telemetry https://telemetry.devolutions.net Administration – Server Settings – Features – Share anonymous usage data with Devolutions
Have I Been Pwned https://api.pwnedpasswords.com Administration – Server Settings – Features – Enable compromised (pwned) check
Push Notification https://login.devolutions.com
https://api.devolutions.com
Administration – Server Settings – Features – Enable Workspace Push Notification
Slack Integration https://slack.com Administration – Server Settings – Logging – Slack Integration
SMTP, Authentication Azure https://graph.microsoft.com Administration – Server Settings – Email – Authentication type
Geo IP https://geoip.maxmind.com Administration – Server Settings – GeoIP Security
Gravatar https://secure.gravatar.com Administration – Server Settings – Features – Enable Gravatar
Yubikey https://api.yubico.com
https://api2.yubico.com
https://api3.yubico.com
https://api4.yubico.com
https://api5.yubico.com
Administration – Server Settings – Multi-factor
Twilio https://api.twilio.com Administration – Server Settings – Multi-factor – SMS
Duo https://api.<>.duosecurity.com Administration – Server Settings – Multi-factor