Evo Prerequisites & Supported Operating Systems

An Alias Email to create as the Global Admin account.

  • We use this as your “Break Glass” account into Evo. Once we sync over your AD info, you will use your normal email address to manage Evo.
  • NOTE: If using Spam/Email Protection Software, make sure to whitelist Evo's domain <evosecurity.com> to prevent important communications from being blocked.

Mobile Device or Hardware Token to receive push notification

  • QR codes can be sent out or generated to enable once your portal is setup.
  • More information on supported authentication methods can be found here

Windows:

  • Windows Server 2016 or higher.
  • Windows Desktop 10 or higher.
  • Intel 64-bit Chipset architecture.

Mac:

  • macOS 14.x - Sonoma
  • macOS 13.x - Ventura
  • macOS 12.x - Monterey
  • macOS 11.x - Big Sur
  • macOS 10.15.x - Catalina
  • macOS 10.14.x - Mojave
  • macOS 10.13.x - High Sierra
  • macOS 10.12.x - Sierra
  • Not supported: beta macOS versions (ex. beta Sequoia)

Access to a Windows test machine

  • Windows 10 or above is required.
  • Access to Windows Login Prompt (UAC) on the machine.
  • We will install the Evo Credential Provider (ECP) to this machine. Once installed you will be able to test MFA, SSO, and Elevated Access
  • Ability to copy and paste text from your computer to this test machine
  • NOTE: For Azure or Domain joined environments, the test machine MUST be joined to the domain.

Access to your Domain Controller (for On-Prem Only)

  • We will install the Evo LDAP agent onto your primary DC
  • Server must be 2016 or Higher
  • .NET Framework 4.7.2 (or higher) has been installed on the server.
  • All users have been created under the Active Directory.
  • All users have a unique email address, specific to their user.
  • All users are a member of a group to be synced.

When installing an Evo LDAP Agent or the Evo Credential Provider, the following considerations should be made. (Evo Agents only require outbound connectivity via the listed ports)

Allowlisted URLs for Firewall

URL
Port
ifconfig.me
443 (LDAP and Credential Provider)
api.evosecurity.com
443 (LDAP and Credential Provider)
sync-api.evosecurity.com
443 (LDAP Only)
a3k8pqjo2tpsr9-ats.iot.us-east-1.amazonaws.com
8883 (LDAP Only)

Allowlisted IP Addresses for Firewall

3.17.228.65

3.20.248.76

3.129.178.76

Allowlisted Domain for Network and Email

URL
Description
*.evosecurity.com
Secured with TLS 1.2/1.3 (HTTPS); if you are on a network with SSL inspection or decryption, you might need to bypass decryption for the evosecurity.com CNAME of your instance.

Allowlisted folders & files for Endpoint Protection

C:\ProgramData\EvoSecurity


File - C:\Program Files\EvoSecurity\EvoAgent\EvoAgentTray.exe

Folder - C:\Program Files\EvoSecurity

Folder - C:\ProgramData\EvoSecurity

Folder - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evo Agent

Process - agent.exe


Did this answer your question?
😞
😐
🤩