United States - firewall exceptions

Assessment Service

Back-end server

Assessment tool download

Windows CTI rules download

Download Center

Download center for XDR customer

Endpoint Basecamp

Endpoint Basecamp API gateway

Custom domain for WSC persistent connection

Cloud endpoint telemetry agent API Gateway

Download center for endpoint release package

For SCP API connection

Download center for SCP package

To upload SCP result

Endpoint Inventory

Agent Portal API Gateway

Download center for endpoint release package

Download center for iES tool and LogCounter

Endpoint Response

API Gateway

ELB FQDN

Endpoint Policies

Policy content download Cloudfront CDN

Endpoint Sensor

Download center for XDR Linux Sensor Kernel Module

Feedback Service

User feedback collection

IDP

www.google.com (Google Recaptcha)

www.gstatic.com (Google Recaptcha)

Trend Micro login service for Trend Vision One and Customer Licensing Portal

IDP (Legacy)

SSO authentication service (Legacy, redirect to tm.login.trendmicro.com)

IDP (UIC)

SSO authentication service

In-App Guides

Provides in-app guides and customer feedback data

Guide content

Log Receiver

XDR log receiver service

Mobile Security

Application gateway FQDN for Mobile apps

Mobile application reputation smart query for mobile enterprise security

Mobile OS vulnerability query for mobile enterprise security

Mobile pattern update for mobile enterprise security

Network Inventory

DDI registration to Network Inventory

portal-* for traditional DDD cloud console and DDI registration

Portal (UIC)

Major portal access to XDR console

Risk Insights Log Receiver (Legacy)

Log receiver for third-parties using the Trend Micro Risk Insights for Splunk app (migrating to unified log receiver)

Sandbox Analysis

Provides a web encyclopedia for threat objects

Sandbox analysis package file download

Service Platform

Public API and other connection services

Upload Center

File collection or other services that operate by customer to upload files to XDR

Apex One SaaS console DNS (refer to license email)

License server

ActiveUpdate server: Windows

ActiveUpdate server: Mac

ActiveUpdate server: Toolbox

Apex One Telemetry Service

Global Smart Scan Server for Apex One Agent

Web Rating Service for Apex One Agent

Smart Feedback for Apex One Agent

Goodware File Reputation Service for Apex One Agent

Community File Reputation Service for Apex One Agent

Predictive Machine Learning (File) for Apex One Agent

Predictive Machine Learning (Behavior) for Apex One Agent

MacOS threat smart query

Smart Protection Network (SPN) Proxy for Smart Protection Services

2.0 and later

Remote Shell for Troubleshooting Service Gateway

2.0 and later

Setting Synchronization for Service Gateway

2.0 and later

Web Reputation Service for Smart Protection Services

All versions

Web Inspection Service for Smart Protection Services

All versions

Community File Reputation Service for Smart Protection Services

All versions

Community Domain/IP Reputation Service for Smart Protection Services

All versions

Certified Safe Software Service for Smart Protection Services

All versions

Mobile App Reputation Service for Smart Protection Services

All versions

Goodware File Reputation Service for Smart Protection Services

All versions

Service Gateway internal Smart Protection Server

All versions

Firmware update for Service Gateway virtual appliance

1.0

Services update for Service Gateway virtual appliance, such as Smart Protection Services, ActiveUpdate service, SO List synch service and Third-party intelligence sync service etc.

1.0

Notification/push channel for Service Gateway virtual appliance.

1.0

Debug log collection via CLI and firmware update package for Service Gateway virtual appliance.

1.0

Apex One

All versions

Deep Discovery Inspector

For all versions, replace "<version>" in the FQDN with your Deep Discovery Inspector version number without the period.

For example, if your Deep Discovery Inspector version is 6.5, use the FQDN: ddi65-p.activeupdate.trendmicro.com/activeupdate

6.2

6.0

5.8

5.7

5.6

Deep Security

All versions

OfficeScan

XG

11.0

Secure Access Module download and upgrade

TCP: 443

√

√

Secure Access Module User Behavior Tracking data feedback

TCP: 443

√

√

Secure Access Module debug log upload

TCP: 443

√

√

Internet Access Gateway Proxy Address

proxy-or.us.ztsa-iag.trendmicro.com (for Oregon)

proxy-br.us.ztsa-iag.trendmicro.com (for Brazil)

TCP: 80/443

√

√

Internet Access On-Premises Gateway (via Service Gateway) Proxy Address

FQDN or IP address of the on-premise gateway

TCP: 8088

√

√

Internet Access On-Premises Gateway (via Service Gateway) NTLM Auth Proxy Address

FQDN or IP address of the on-premise gateway

TCP: 8089

√

√

Internet Access On-Premises Gateway (via Service Gateway) ICAP Service Address

FQDN or IP address of the on-premise gateway

TCP: 1344/11344

Internet Access Gateway PAC file location

TCP: 80/443

√

√

General authentication services

Google reCAPTCHA:

TCP: 443

Internet Access Gateway authentication service used for:

• Browser-based or agent-less authentication
• Diagnostic services
• Integration with Secure Access modules for retrieving PAC files and other necessary information

TCP: 80/443

√

Private Access service accessed by Secure Access Module and Private Access Connector

TCP: 443

√

√

√

√

Private Access Connector download by users

TCP: 443

Private Access Connector CDT collect

TCP: 443

UDP: 443

√

Private Access Connector firmware upgrade

TCP: 443

UDP: 443

√

Microsoft Azure IoT Hub

TCP: 443

UDP: 443

√

√

Speed test for Secure Access Module, Private Access Connector, and Private Access User Portal

Private Access Connector automatically selects the site that has the lowest network latency. If you have configured firewalls, Trend Micro recommends adding all of the following FQDNs:

TCP: 443

√

√

√

Private Access Static IP Pool of Cloud Relay Service

Private Access Connector automatically selects the site that has the lowest network latency. If you have configured firewalls, Trend Micro recommends adding all of the following IP pools:

TCP: 443

UDP: 443

√

√

√

Private Access Browser Access End User Portal

TCP: 443

√

Private Access Browser Access Proxy

TCP: 443

TCP: 80

√

Private Access Browser Access Proxy for Remote Desktop (RDP)

TCP: 443

TCP: 80

√

Private Access Connector NTP server

Default NTP servers are listed as follows. You can configure your own NTP servers.

UDP: 123

√

P2P communication between Private Access Connector and Secure Access Module

Peer's internet IP address

UDP: random port number, greater than 10000

√

√