> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/knowledge-base/knowledge-base-articles/list-of-internet-endpoints-accessed-by-devolutions-server.md).

# List of internet endpoints accessed by Devolutions Server

These are the lists of addresses that are accessed by Devolutions Server and the Devolutions Server Console during normal operation, as well as the setting(s) to disable/prevent this access.

{% hint style="danger" %}
We use a "best effort" approach to maintain this list, but it **does not replace proper IT security practices**. If security is paramount, it would be better to first block all internet access, then allowlist desired addresses as needed.
{% endhint %}

### Devolutions Server endpoints list

<table><thead><tr><th width="190">DESCRIPTION</th><th width="285">URL</th><th>RELATED SETTING(S) / ACTION</th></tr></thead><tbody><tr><td><strong>Devolutions Server</strong> <strong>update check</strong></td><td>https://devolutions.net</td><td><em><strong>Devolutions Server Console – Support – Check for Updates</strong></em></td></tr><tr><td><strong>Devolutions Server</strong> <strong>update - package download</strong></td><td>https://cdn.devolutions.net</td><td>User action in the upgrade available dialog</td></tr><tr><td><strong>PAM - Provider Azure</strong></td><td>https://graph.microsoft.com</td><td>Azure type PAM Provider</td></tr><tr><td><strong>Azure Authentication</strong></td><td>https://login.microsoftonline.com<br>https://graph.microsoft.com</td><td><em><strong>Administration – Server Settings – Authentication – Microsoft Authentication</strong></em></td></tr><tr><td><strong>Okta Authentication</strong></td><td>https://&#x3C; domain >.okta.com</td><td><em><strong>Administration – Server Settings – Authentication – Okta Authentication</strong></em></td></tr><tr><td><strong>SMTP, Authentication Azure</strong></td><td>https://graph.microsoft.com</td><td><em><strong>Administration – Server Settings – Email – Authentication type</strong></em></td></tr><tr><td><strong>Slack Integration</strong></td><td>https://slack.com</td><td><em><strong>Administration – Server Settings – Logging – Slack Integration</strong></em></td></tr><tr><td><strong>Licenses</strong></td><td>https://quoting.devolutions.com</td><td><em><strong>Administration – Server Settings – Features – Enable Internet Access.</strong></em></td></tr><tr><td><strong>Gravatar</strong></td><td>https://secure.gravatar.com</td><td><em><strong>Administration – Server Settings – Features – Enable Gravatar</strong></em></td></tr><tr><td><strong>Have I Been Pwned</strong></td><td>https://api.pwnedpasswords.com</td><td><em><strong>Administration – Server Settings – Features – Enable compromised (pwned) check</strong></em></td></tr><tr><td><strong>Block Tor clients</strong></td><td>https://cloud.devolutions.net</td><td><em><strong>Administration – Server Settings – Features – Block Tor clients</strong></em></td></tr><tr><td><strong>Telemetry</strong></td><td>https://telemetry2.devolutions.net:9200</td><td><em><strong>Administration – Server Settings – Features – Share anonymous usage data with Devolutions</strong></em></td></tr><tr><td><strong>Push Notification</strong></td><td>https://login.devolutions.com<br>https://api.devolutions.com (only applies to 2024.3 or earlier)<br>quoting.devolutions.com</td><td><em><strong>Administration – Server Settings – Features – Enable Devolutions Password Manager Push Notification.</strong></em></td></tr><tr><td><strong>Devolutions Send</strong></td><td>https://send.devolutions.com</td><td><em><strong>Administration – Server Settings – Features – Allow users to send password with Devolutions Send</strong></em></td></tr><tr><td><strong>Yubikey</strong></td><td>https://api.yubico.com<br>https://api2.yubico.com<br>https://api3.yubico.com<br>https://api4.yubico.com<br>https://api5.yubico.com</td><td><em><strong>Administration – Server settings – Multifactor</strong></em></td></tr><tr><td><strong>Twilio</strong></td><td>https://api.twilio.com</td><td><em><strong>Administration – Server Settings – Multifactor – SMS</strong></em></td></tr><tr><td><strong>Duo</strong></td><td>https://api.&#x3C;>.duosecurity.com</td><td><em><strong>Administration – Server Settings – Multifactor – Duo</strong></em></td></tr><tr><td><strong>Geo IP</strong></td><td>https://geoip.maxmind.com</td><td><em><strong>Administration – Server Settings – GeoIP Security</strong></em></td></tr></tbody></table>

### Devolutions Server Console endpoints list

<table><thead><tr><th width="229">DESCRIPTION</th><th width="291">URL</th><th>RELATED SETTING(S) / ACTION</th></tr></thead><tbody><tr><td><a href="https://docs.devolutions.net/server/getting-started/installation/installing-web-server-prerequisites/"><strong>Devolutions Server script installation</strong></a></td><td>https://redirection.devolutions.com<br>https://iis.net<br>https://dotnet.microsoft.com</td><td>Devolutions Server service installation</td></tr><tr><td><strong>Devolutions Server</strong> <strong>(instance and scheduler) and</strong> <strong>Devolutions Gateway</strong> <strong>installation</strong></td><td>https://devolutions.net<br>https://redirection.devolutions.com</td><td><a href="https://docs.devolutions.net/server/getting-started/installation/create-server-instance/">Create a Devolutions Server instance</a><br><a href="https://docs.devolutions.net/gateway/getting-started/server/server-configuration/">Devolutions Gateway configuration with Devolutions Server</a></td></tr></tbody></table>

### URLs to allowlist for Entra ID authentication

Some URLs must be allowlisted in order for Entra ID authentication to work properly. Note that this list is based on Microsoft's current environment and may be subject to change, as it is outside of Devolutions' control.

* `login.microsoftonline.com`
* `login.microsoft.com`
* `login.windows.net`
* `*.msauth.net`
* `*.msauthimages.net`
* `*.aadcdn.msftauth.net`
* `*.aadcdn.msftauthimages.net`
* `*.aadcdn.microsoftonline-p.com`
* `*.microsoftonline-p.com`

{% hint style="info" %}
These URLs are derived from the [Azure portal URLs](https://learn.microsoft.com/en-us/azure/azure-portal/azure-portal-safelist-urls?tabs=public-cloud) and [Microsoft 365 URLs and IP address ranges](https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide) articles.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/server/knowledge-base/knowledge-base-articles/list-of-internet-endpoints-accessed-by-devolutions-server.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.