Installation Prerequisites

Enzoic for Active Directory v3.6

System Requirements

Enzoic for Active Directory supports any Windows Server 2012 or later for Forest and Domain functional level. Microsoft .NET Framework 4.5.1 or newer is required.

Enzoic for Active Directory requires an active Internet connection. You can specify a proxy server if you do not want Enzoic for Active Directory communicating directly over the Internet. Please see Firewall Requirements below for the required IP whitelist.

Firewall Requirements

Enzoic for Active Directory must be able to contact its servers to look up the compromised status for passwords. If your firewall supports whitelisting by FQDN, whitelist the following FQDNs for outbound communications over TCP port 443 from your domain controllers:

api.enzoic.com
app-api.enzoic.com
cdn.enzoic.com

If your firewall cannot whitelist by FQDN, the IP addresses below should be whitelisted for outbound communications over TCP port 443 from your domain controllers.

13.235.194.196
13.48.121.56
13.48.96.148
15.206.40.21
18.196.181.48
3.10.99.236
3.124.25.136
3.231.37.171
3.24.50.155
3.24.93.121
3.9.236.117
34.214.110.33
35.153.27.185
35.163.59.86
35.168.85.109
35.180.249.238
35.181.124.196
52.192.30.99
52.199.52.28
52.212.218.163
52.48.142.122
52.51.10.65
52.79.68.108
52.89.197.157
54.172.238.226
54.180.42.79
54.233.211.111
54.233.236.93
75.2.9.104
99.83.177.145

Antivirus Whitelisting

If you are running any type of heuristics based antivirus software, for example CrowdStrike, you must whitelist the Enzoic processes and files in the following locations:

C:\Program Files\Enzoic for Active Directory
C:\Windows\System32\EnzoicFilter.dll

Heuristics-based antivirus applications will often interfere with Enzoic’s ability to read and write from Active Directory.

Ensure Enzoic Port is Available

Enzoic for Active Directory uses a local port for communications between its processes on each Domain Controller where it is running. The default port is 6164. If this port is being used by other software on the system, unexpected behaviors may result. If necessary, the port can be changed using the following registry setting after install:

Registry Key: "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Enzoic\Enzoic for Active Directory"
Value Name: ServicePort 
Value Type: DWORD
Value: (new port to use)