Service Addresses and Ports

Deep Discovery Inspector accesses several Trend Micro services to obtain information about emerging threats and to manage your existing Trend Micro products. The following table describes each service and provides the required address and port information accessible to the product version in your region.

Note

All services connect using HTTPS with TLS 1.2 or above. If your environment has man-in-the-middle devices, verify that the devices support TLS 1.2 or above.

Trend Micro recommends using the Network Service Diagnostics screen to troubleshoot the connection to all services. For details, see Cannot Connect to Network Services.

Service Addresses and Ports

Service	Description	Address and Port	Notes
ActiveUpdate Server	Provides updates for product components, including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	`ddi57-p.activeupdate.trendmicro.com/activeupdate:443`	Related to product version and region
Certified Safe Software Service (CSSS)	Verifies the safety of files. Certified Safe Software Service reduces false positives, and saves computing time and resources.	`grid-global.trendmicro.com:443`
Community Domain/IP Reputation Service	Determines the prevalence of detected domains and IP addresses. Prevalence is a statistical concept referring to the number of times a domain or IP address was detected by Trend Micro sensors at a given time.	`ddi570-en-domaincensus.trendmicro.com:443`	Related to product version and region
Community File Reputation	Determines the prevalence of detected files. Prevalence is a statistical concept referring to the number of times a file was detected by Trend Micro sensors at a given time.	`ddi570-en-census.trendmicro.com:443`	Related to product version and region
Customer Licensing Portal	Manages your customer information, subscriptions, and product or service license.	`licenseupdate.trendmicro.com:443`
Deep Discovery Director - Cloud version	A hosted service that enables connection to Trend Micro XDR.	`*.dddxdr.trendmicro.com:443`	Related to product version and region
Deep Discovery Director - Network Analytics as a Service	A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	`*.nacloud.trendmicro.com:443`	Related to product version and region
Dynamic URL Scanning	Performs real-time analysis of URLs to detect zero-day attacks.	`ddi5-7-en-t0.url.trendmicro.com:443`	Related to product version and region Disabled when using Smart Protection Server
Mobile App Reputation Service (MARS)	Collects data about detected threats in mobile devices. Mobile App Reputation Service is an advanced sandbox environment that analyzes mobile app runtime behavior to detect privacy leaks, repacked mobile apps, third-party advertisement SDKs, vulnerabilities, and app categories.	`rest.mars.trendmicro.com:443`
Predictive Machine Learning engine	Through use of malware modeling, Predictive Machine Learning compares samples to the malware models, assigns a probability score, and determines the probable malware type that a file contains.	`ddi57-en-f.trx.trendmicro.com:443`	Related to product version and region
Retro Scan	A cloud-based service that scans historical web access logs for callback attempts to C&C servers and other related activities in your network.	`intelliconnect.trendmicro.com:443` `ddi57-retroscan.trendmicro.com:443`	Related to product version and region
Sandbox as a Service (for macOS)	A hosted service that analyzes possible threats for macOS.	`ddaaas.trendmicro.com:443`
Sandbox as a Service	A hosted service that analyzes possible threats.	`*.ddcloud.trendmicro.com:443`	Related to product version and region If the product was registered to the service before a product upgrade was performed, Trend Micro recommends that you reregister to the service to connect to the new address.
Smart Feedback	Shares anonymous threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	`ddi570-en.fbs25.trendmicro.com`	Related to product version and region
Threat Connect	Correlates suspicious objects detected in your environment and threat data from the Trend Micro Smart Protection Network. The resulting intelligence reports enable you to investigate potential threats and take actions pertinent to your attack profile.	`ddi57-threatconnect.trendmicro.com:443`	Related to product version and region
Trend Micro XDR	Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With XDR, you can respond more effectively to threats, minimizing the severity and scope of a breach.	`*.xdr.trendmicro.com:443`	Related to product version and region
Web Inspection Service	Web Inspection Service is an auxiliary service of Web Reputation Services, providing granular levels of threat results and comprehensive threat names to users. The threat name and severity can be used as filtering criteria for proactive actions and further intensive scanning.	`ddi5-7-en-wis.trendmicro.com:443`	Related to product version and region
Web Reputation Services	Tracks the credibility of web domains. Web Reputation Services assigns reputation scores based on factors such as a website's age, historical location changes, and indications of suspicious activities discovered through malware behavior analysis.	`ddi5-7-en.url.trendmicro.com:443`	Related to product version and region

$('#title').html($('meta[name=description]').attr('content'));