List of internet endpoints accessed by Devolutions Server

These are the lists of addresses that are accessed by Devolutions Server and the Devolutions Server Console during normal operation, as well as the setting(s) to disable/prevent this access.

We use a "best effort" approach to maintain this list, but it does not replace proper IT security practices. If security is paramount, it would be better to first block all internet access, then allowlist desired addresses as needed.

Devolutions Server endpoints list

DESCRIPTION	URL	RELATED SETTING(S) / ACTION
Devolutions Server update check	https://devolutions.net	Devolutions Server Console – Support – Check for Updates
PAM - Provider Azure	https://graph.microsoft.com	Azure type PAM Provider
Azure Authentication	https://login.microsoftonline.com https://graph.microsoft.com https://graph.microsoft.us (US Government cloud)	Administration – Server Settings – Authentication – Microsoft Authentication
Okta Authentication	https://< domain >.okta.com	Administration – Server Settings – Authentication – Okta Authentication
SMTP, Authentication Azure	https://graph.microsoft.com	Administration – Server Settings – Email – Authentication type
Slack Integration	https://slack.com	Administration – Server Settings – Logging – Slack Integration
Licenses	https://quoting.devolutions.com	Administration – Server Settings – Features – Enable Internet Access.
Gravatar	https://secure.gravatar.com	Administration – Server Settings – Features – Enable Gravatar
Have I Been Pwned	https://api.pwnedpasswords.com	Administration – Server Settings – Features – Enable compromised (pwned) check
Block Tor clients	https://cloud.devolutions.net	Administration – Server Settings – Features – Block Tor clients
Telemetry	https://telemetry2.devolutions.net:9200	Administration – Server Settings – Features – Share anonymous usage data with Devolutions
Push Notification	https://login.devolutions.com quoting.devolutions.com	Administration – Server Settings – Features – Enable Devolutions Password Manager Push Notification.
Devolutions Send	https://send.devolutions.com https://send.devolutions.eu (Europe region) https://challenges.cloudflare.com and *.cloudflare.com (CAPTCHA protection)	Administration – Server Settings – Features – Allow users to send password with Devolutions Send
Yubikey	https://api.yubico.com https://api2.yubico.com https://api3.yubico.com https://api4.yubico.com https://api5.yubico.com	Administration – Server settings – Multifactor
Twilio	https://api.twilio.com	Administration – Server Settings – Multifactor – SMS
Duo	https://api.<>.duosecurity.com	Administration – Server Settings – Multifactor – Duo
Geo IP	https://geoip.maxmind.com	Administration – Server Settings – GeoIP Security
Connection icon cache	https://iconcache.devolutions.com	Displaying connection icons
User avatar	https://ui-avatars.com https://webdevolutions.blob.core.windows.net	Default avatar generation and image assets when no custom avatar is set
Change history	https://server.devolutions.net	Link displayed on the Devolutions Server login page
AI Assistant	https://api.anthropic.com (Claude) https://api.openai.com (OpenAI) https://generativelanguage.googleapis.com (Google Gemini) https://api.mistral.ai (Mistral) https://models.inference.ai.azure.com (Azure AI Inference)	Administration – Server Settings – Features – AI Assistant
Synchronizer - Azure Virtual Machines	https://management.azure.com	Azure Virtual Machines Synchronizer
Synchronizer - Azure Key Vault	https://vault.azure.net	Azure Key Vault Synchronizer
Synchronizer - Lansweeper	https://api.lansweeper.com	Lansweeper Synchronizer
Synchronizer - Bitwarden	https://vault.bitwarden.com (United States region) https://vault.bitwarden.eu (Europe region)	Bitwarden Synchronizer
Web interface documentation links	https://redirection.devolutions.com	Documentation links shown in the web interface

AI Assistant and synchronizer endpoints are only contacted when an administrator configures the corresponding provider or synchronizer.

Devolutions Server Console endpoints list

DESCRIPTION	URL	RELATED SETTING(S) / ACTION
Devolutions Server script installation	https://redirection.devolutions.com https://dotnet.microsoft.com https://builds.dotnet.microsoft.com https://learn.microsoft.com	Devolutions Server service installation
Devolutions Server update - package download	https://cdn.devolutions.net	User action in the upgrade available dialog
Devolutions Server (instance and scheduler) and Devolutions Gateway installation	https://devolutions.net https://redirection.devolutions.com	Create a Devolutions Server instance Devolutions Gateway configuration with Devolutions Server

URLs to allowlist for Entra ID authentication

Some URLs must be allowlisted in order for Entra ID authentication to work properly. Note that this list is based on Microsoft's current environment and may be subject to change, as it is outside of Devolutions' control.

• login.microsoftonline.com
• login.microsoft.com
• login.windows.net
• *.msauth.net
• *.msauthimages.net
• *.aadcdn.msftauth.net
• *.aadcdn.msftauthimages.net
• *.aadcdn.microsoftonline-p.com
• *.microsoftonline-p.com

These URLs are derived from the Azure portal URLs and Microsoft 365 URLs and IP address ranges articles.