HENNGE One Supported Environments

OS / Browser

HENNGE Access Control / HENNGE Email DLP / HENNGE Email Archive / HENNGE Secure Transfer / HENNGE Tadrill / HENNGE File DLP

• The HENNGE Secure Transfer screen is only available in the PC version.
• The management screens for all services are only available in the PC version.
• IE Mode in Edge is not supported.
• End of Internet Explorer 11 Support in HENNGE One
• Customized Android OS (Custom ROM) such as ColorOS is not supported.

HENNGE Secure Browser / HENNGE Secure Browser Desktop

• HENNGE Secure Browser prioritizes support for viewing "Email," "Calendar," and "Contacts" in Microsoft 365 / Google Workspace. It may not function as expected due to factors such as:
  • Specifications or limitations of your environment (OS / device, etc.)
  • Specifications or limitations of the accessed service (Microsoft 365 / Google Workspace)
• Services not provided in the mobile Microsoft 365 / Google Workspace web interface require the use of dedicated native apps.
• Customized Android OS (Custom ROM) like ColorOS is not supported.

HENNGE Lock

• Customized Android OS (Custom ROM) like ColorOS is not supported.

HENNGE Device Certificate (including Import tool) 

• Customized Android OS (Custom ROM) such as ColorOS is not supported.

HENNGE Cloud Protection

• For further details, please follow the provisions set forth in the WithSecure Elements Collaboration Protection License Terms (https://www.withsecure.com/en-us/about-us/legal/terms).

HENNGE Tadrill

• If you have implemented email security services such as spam filters or URL/Attachment detection, please configure whitelist registration, etc., on the security service side as needed when introducing the product separately.
• The file opening detection for training emails distributed by HENNGE Tadrill has been verified to work with the latest version of Excel and Word in Microsoft 365 Apps.
  Other desktop apps (such as Excel 2021) are not supported and may not function properly.
• Regarding the Outlook desktop app, operation has been verified with the latest version of Outlook in Microsoft 365 Apps.
  Other Outlook desktop apps (such as the one-time purchase desktop apps like Outlook 2021) are not supported, and issues such as not functioning properly when clicking URLs may occur.

HENNGE Tadrill Alert

• Regarding the Outlook desktop app, we have confirmed operation with the latest version of Outlook in Microsoft 365 Apps.
  Outlook desktop apps other than the above (such as standalone desktop apps like Outlook 2021) are not supported and may not function properly.

HENNGE Directory Sync Tool

The HENNGE Directory Sync Tool refers to the proxy settings of Internet Options.
Please log on to the server with the service startup account and configure the proxy settings.
For proxy settings, please check [ Network ].

Device Requirements

Meet at least one of the following device requirements.

• A machine that is part of a domain managed by Active Directory, with Windows / Windows Server supported by Microsoft
• An Active Directory Domain Controller with Windows / Windows Server supported by Microsoft

Software Requirements

1. .NET Framework 4.0 or higher.
2. Windows PowerShell 3.0 or higher.
3. The latest version of the Active Directory module for Windows PowerShell.

Communication Requirements

1. Must be able to communicate via HTTPS (443) port externally.
2. Not using an automatic configuration script on the proxy server.
3. No user authentication upon connection.
4. If installing the HENNGE Directory Sync Tool on a machine other than an Active Directory Domain Controller, ensure that the ports listed in the following Microsoft article under [ 1. Ports used by domain members ] are open between the installation environment and the Domain Controller.
   Ports used in a domain environment

Active Directory Domain Controller Requirements

1. Must be a Windows Server supported by Microsoft.
2. The [ unixUserPassword ] attribute must exist in the Active Directory user attributes.
3. Active Directory WEB Service must be running.

HENNGE Connect Agent

1. OS: Must be a Windows Server supported by Microsoft.
   For other operational requirements, please refer to the help center below.
   Check operational requirements (HENNGE Connect)

Support Policy for Older Versions upon New Version Release

If you are using a version earlier than those listed in this article

Please update the version.
※ HENNGE does not intentionally block users' service connections in principle, but the quality of the HENNGE One experience may gradually decline.

Handling of the Old Generation After the New Generation Release

• Browser
  When a new version is released, support for the latest version begins, and at the same time, the oldest version among the supported versions becomes unsupported.
• OS
  • Windows: We will inform you as needed.
  • ChromeOS: Complies with Google's Auto Update Expiration (AUE). For the auto-update policy, please refer to here.
  • iOS, iPadOS, watchOS, macOS, Android: Three months after the release of a major version, the oldest version among the supported versions becomes unsupported.

Network

Service FQDN (URL)

The FQDN / ports to be set to allow access for each service are as follows.
Please implement the permission settings for communication with the FQDN and ports of the services you are using.

• When setting access permissions by URL, please write "https://" at the beginning of the FQDN and "/*" at the end.
• For wildcard specifications (FQDNs containing *), the destination FQDN changes dynamically, so permission settings with wildcards are required.

Connected Service IP Addresses

HENNGE One services operate with dynamically changing IP addresses, so you need to set access permissions for all global IP addresses displayed at this link by specifying the range.
Please note that the list on the above link may change without notice in the future.

IP Addresses Accessible to the Service

Single Sign-On

HENNGE Access Control (SAML Authentication)

• Supports SAML2.0
• The NameID of SAML authentication (user account information) matches one of the user information items on HENNGE Access Control
• Supports both SP-Initiated SSO / IdP-Initiated SSO or either
• Can handle NameIDFormat as "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" or "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
• Supports SHA-256 (SHA-2) SAML signature certificate

HENNGE Access Control (OpenID Connect)

• Is a Relying Party that supports Authorization Code Flow
• Is a Confidential client
• Client authentication is either client_secret_post or client_secret_basic
• Scope is either openid, profile, email, or offline_access
• ID token claims can use aud, iss, sub, iat, exp, hd, name, given_name, family_name, preferred_username, email, email_verified, zoneinfo, locale, updated_at, auth_time, nonce, custom attributes
• Redirect URI is an HTTPS format URL or localhost (including 127.0.0.1, [::1])

Integratable Email Services

HENNGE Email DLP / HENNGE Email Archive

1. Exchange Online
   ※ Microsoft 365, Exchange Online, Edge, and Active Directory are trademarks or registered trademarks of Microsoft Corporation in the United States and other countries.
2. Google Workspace Business Gmail Webmail Service
   ※ Google Workspace, Gmail Webmail Service, and Chrome are trademarks or registered trademarks of Google LLC in the United States and other countries.