Devolutions Server Features:

• Vault Privileged Accounts - Manage privileged accounts and passwords on your own secured servers, while providing business users with an easy-to-use web interface.
  • Centralized Shared Vault:
    • Protect credentials & access to privileged accounts in your centralized vault using the latest AES 256-bit encryption standards.
    • Vault credentials, as well as other privileged information like certificates, secret keys, files, images, license keys, credit cards, etc.
    • Maintain control of your database's security by deploying it on-premises or in your own private Azure cloud.
  • Account Discovery:
    • Automatically scan to discover privileged accounts (user, system, admin, service, database, etc.) from your Active Directory provider(s).
    • Categorize discovered accounts in folders for easy access and classification.
    • Customize various scan configurations to fine-tune the accounts you wish to synchronize with Devolutions Server.
  • Scalable Structure:
    • Manage your data by department, customer, or location with multiple vaults.
    • Provide members with their very own User Vault to store personal, business-related passwords.
    • Use folders to classify entries and provide organizational structure to your vaults.
• Launch Privileged Sessions - Securely establish privileged sessions and remote connections to servers, websites, and applications.
  • Account Brokering:
    • Brokering allows credentials to be injected directly into remote sessions without ever exposing them to the user.
    • Increases productivity without having to rotate passwords since they remain hidden.
    • Conveniently launch remote sessions from the web browser using credentials from your shared vault.
  • Session Recording and Monitoring:
    • Save remote session recordings locally or remotely using the included recording server.
    • Record sessions like RDP and SSH in video format as well as session keystrokes.
    • Easily access recorded remote sessions for playback and review.
  • Fully Integrated Technologies*:
    • Store all of your favorite remote session types like RDP, VNC, ARD, Wayk Client, SSH, Telnet, Port Forward, Proxy Tunnel, FTP, WebDav, and more in your centralized vault.
    • Increase security by launching sessions through a variety of supported VPNs like FortiClient, Microsoft VPN, Cisco VPN, SonicWall, Watchguard, Juniper, and IPSecVPN.
    • Unlock a whole host of powerful IT tools when you combine Devolutions Server with Remote Desktop Manager.
  • *Utilizing privileged session management (PSM) components requires Remote Desktop Manager to launch remote connections and sessions.
• Control Critical Assets - Set permissions using role-based access controls to provision passwords to groups of users while protecting privileged accounts and assets.
  • Role-Based Access Control:
    • Role-based access control (RBAC) allows for a robust, yet flexible protection system, giving admins ultimate control over security.
    • Users, as well as groups, can be synchronized with Active Directory to reflect your already existing infrastructure.
    • Assign permissions in a granular fashion, allowing for easy customization of who has access to view/edit/delete, vaults, folders, and entries.
  • Checkout Request Approval Workflow:
    • Privileged accounts can easily be requested for checkout by users, which automatically notifies admins for approval.
    • Add additional security by enforcing time limits on privileged sessions, so they aren't left unattended and exposed.
  • Multiple Security Layers:
    • Enforce an additional layer of security to authenticate users with various 2FA/MFA solutions like: Office 365, SMS, Email, Devolutions Workspace, Duo, Google Authenticator, Yubikey, Radius Server, Azure Multi-Factor and SafeNet.
    • Two-Factor Authentication can be implemented system-wide or just on a per-user basis, depending on your security policies.
• Secure Passwords & Access - Automatically rotate credentials on various account types and enforce system-wide password policies.
  • Password Rotation on Check-In:
    • Enforce password rotation upon check-in of a privileged account, which changes both system and Devolutions Server credentials.
    • This automation prevents admins from having to manually edit accounts on a schedule.
  • Password Reset OTP:
    • Remotely reset passwords on accounts and provide users with one-time passwords for specific access conditions.
  • Password Policies:
    • Establish and enforce defined password rules with a wide variety of complexity customizations
    • Enforce specific password templates throughout your system, to meet your password policy requirements.
    • Easily generate strong passwords on the fly with the easy-to-use password generator.
• Monitor & Report Activity - Keep track of privileged sessions and account activity with detailed reports for logging, audit, and compliance purposes.
  • Comprehensive Audit Reports:
    • Establish transparency by keeping track of all privileged account, password, and session related actions.
    • Monitor how entries were used, when they were used, and who accessed them.
    • Keep track of logs or send the Syslog file to external tools for reporting and auditing purposes.
  • Real-Time Notifications:
    • Quickly notify admins when privileged accounts are requested for use, so that they can approve/deny access.
    • Apply email notification on activities or changes made to privileged sessions and accounts.
    • Enable real-time alerts when users access or modify specific passwords or sessions that are shared with them.
  • Password History:
    • Verify the strength of passwords stored with the password analyzer, to ensure they meet your password policies.
    • Use the Password History feature to view the entire lifecycle of a credential, how it has been used, and when it was last changed.
• Deploy & Integrate Easily - Improve your organization’s workflow with the turnkey solution, created specifically with the needs of SMBs in mind.
  • Fast Deployment & Onboarding:
    • Devolution's dedicated customer success specialists are standing by to help you every step of the way, from installation and configuration to troubleshooting and support.
    • Check out the Devolutions Community Forum to ask your questions, make feature requests, and engage with the user community.
  • Intuitive End-User Tools:
    • Enforce strong, complex passwords with the built-in password generator to maximize the protection of privileged accounts.
    • Log into websites using passwords stored in your vaults with the Devolutions Web Login browser extension available for Chrome, Firefox, Edge, and Opera.
    • Perform vault-level commands to pass credentials between applications with the Devolutions Server CLI tool.
    • Send secure messages within your team, and safely pass privileged credentials from your vault to members who require access.
  • Highly Compatible*:
    • Integrates easily with existing password managers, including: 1Password, AuthAnvil, CyberArk, Dashlane, KeePass, LastPass, Mateso Password Safe, PassPortal, Password Manager Pro, Password Safe, Password Vault Manager, Passwordstate, Pleasant Password Server, RoboForm, Thycotic Secret Server, Sticky Password, TeamPass, True Key, Windows Credential Manager, Zoho Vault, and Bitwarden.
    • Compatible with popular VPN clients like FortiClient, Microsoft VPN, Cisco VPN, SonicWall, Watchguard, Juniper, and IPSecVPN.
  • *Integration with external tools and remote connections requires Remote Desktop Manager working in conjunction with Devolutions Server.