HENNGE One Operating Environment

OS / Browser

HENNGE Access Control / HENNGE Email DLP / HENNGE Email Archive / HENNGE Secure Transfer / HENNGE Tadrill / HENNGE File DLP

• HENNGE Secure Transfer and other service management screens are only available on the PC version.
• IE mode in Edge is not supported.
• Notice of Internet Explorer 11 support termination in HENNGE One
• Customized Android OS (Custom ROM) such as ColorOS are not supported.

HENNGE Secure Browser / HENNGE Secure Browser Desktop

• HENNGE Secure Browser prioritizes viewing "Mail," "Calendar," and "Contacts" of Microsoft 365 / Google Workspace. It may not function as expected due to the following reasons:
  • Specifications and restrictions of your environment (OS / device, etc.)
  • Specifications and restrictions of the accessed service (Microsoft 365 / Google Workspace)
• For services not provided in the mobile Microsoft 365 / Google Workspace web interface, you need to use dedicated native apps.
• Customized Android OS (Custom ROM) like ColorOS are not supported.

HENNGE Lock

• Customized Android OS (Custom ROM) like ColorOS are not supported.

HENNGE Device Certificate (including Import Tool)

• Customized Android OS (Custom ROM) such as ColorOS is not supported.

HENNGE Cloud Protection

HENNGE Tadrill

• If you have introduced email security services such as spam mail filters or URL/attachment detection, please perform whitelist registration or other necessary settings on the security service side when introducing the product separately.
• File opening detection for training emails delivered by HENNGE Tadrill has been verified to work with the latest versions of Excel and Word in Microsoft 365 Apps. Other desktop apps (such as Excel 2021) are not supported and may not function properly.

HENNGE Tadrill Alert

• Regarding Outlook desktop app, we have confirmed its operation with the latest version of Outlook in Microsoft 365 Apps.
• For other Outlook desktop apps (such as Outlook 2021, etc.), which are not subscription-based, they are not supported, and may not function correctly.

HENNGE Directory Sync Tool

The HENNGE Directory Sync Tool refers to the proxy settings in Internet Options.
Please log on to the server with the service startup account and configure the proxy settings.
For proxy settings, please refer to [ Network ].

Device Requirements

Meet one of the following device requirements:

• Machines joined to a domain managed by Active Directory, running Windows / Windows Server supported by Microsoft
• Active Directory Domain Controller running Windows / Windows Server supported by Microsoft

Software Requirements

1. .NET Framework 4.0 or higher.
2. Windows PowerShell 3.0 or higher.
3. The latest version of Windows PowerShell Active Directory module.

Communication Requirements

1. Ability to communicate over HTTPS (port 443) externally.
2. Not using automatic configuration scripts on proxy servers.
3. No user authentication during connection.
4. If installing the HENNGE Directory Sync Tool on an environment other than the Active Directory Domain Controller, ensure that the ports listed in the following Microsoft article, [ 1. Ports used by domain members ], are open in the installation environment and Domain Controller.
   About ports used in a domain environment

Active Directory Domain Controller Requirements

1. Must be a Windows Server supported by Microsoft.
2. The Active Directory user must have the [ unixUserPassword ] attribute.
3. The Active Directory WEB Service must be operational.

HENNGE Connect Agent

1. OS: Must be a Windows Server supported by Microsoft.
   For other operational requirements, please refer to the help center below.
   Check operational requirements (HENNGE Connect)

Support Policy for Previous Versions upon New Version Release

If Using Versions Prior to Those Mentioned in This Article

Please update your version.
※ HENNGE does not intentionally block user service connections, but the quality of the HENNGE One experience may gradually decline.

Treatment of Previous Generations After New Generation Release

• Browser
  When a new version is released, support for the latest version begins, and at the same time, the oldest version among the supported versions becomes unsupported.
• OS
  • Windows : Updates will be notified by us as needed.
  • ChromeOS : Complies with Google's Auto Update Expiration (AUE). For information on the auto update policy, please refer to here.
  • iOS, iPadOS, watchOS, macOS, Android : After 3 months from the release of a major version, the oldest version among the supported versions becomes unsupported.

Network

Fully Qualified Domain Name (FQDN)

Below are the FQDN / port settings that should be configured to allow access for each service.
Please implement the permission settings for communication access with the FQDN and port of the service you are using.

• If setting access permission by URL, please include "https://" at the beginning and "/*" at the end of the FQDN.
• For wildcard entries (FQDN including *), permission settings with wildcards are essential as the destination FQDN changes dynamically.

Service IP Addresses

The HENNGE One service operates with dynamically changing IP addresses, so it is necessary to set access permissions for all global IP addresses specified in this link in a range. Please be aware that the list provided in the link above may be changed without notice in the future.

IP Addresses that can access the service

Single Sign-On

HENNGE Access Control (SAML Verification)

• Supports SAML 2.0
• The NameID for SAML verification matches the user information on HENNGE Access Control
• Matches any of the items
• Supports both SP-Initiated SSO and IdP-Initiated SSO, or either
• Capable of handling "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" or "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" as NameIDFormat
• Supports SHA-256 (SHA-2) SAML signature certificates

HENNGE Access Control (OpenID Connect)

• Is a Relying Party that supports Authorization Code Flow
• Is a Confidential client
• Client authentication is either client_secret_post or client_secret_basic
• Scopes include openid, profile, email, offline_access
• The ID token claims can include aud, iss, sub, iat, exp, hd, name, given_name, family_name,
• preferred_username, email, email_verified, zoneinfo, locale, updated_at, auth_time, nonce
• The redirect URI is in HTTPS format, or localhost (including 127.0.0.1, [::1])

Compatible Email Services

HENNGE Email DLP / HENNGE Email Archive

1. Exchange Online
   ※ Microsoft 365, Exchange Online, Edge, and Active Directory are trademarks or registered trademarks of Microsoft Corporation in the United States and other countries.
2. Google Workspace Business Gmail Webmail Service
   ※ Google Workspace, Gmail Webmail Service, and Chrome are trademarks or registered trademarks of Google LLC in the United States and other countries.