NoteAll services connect using HTTPS with TLS 1.2 or above. If your
environment has man-in-the-middle devices, verify that the devices support TLS 1.2
or
above.
Trend Micro recommends
using the Network Service Diagnostics screen to
troubleshoot the connection to all services. For details, see Cannot Connect to Network Services.
|
Service
|
Description
|
Address and Port
|
Notes
|
ActiveUpdate Server
|
Provides updates for product components, including pattern
files. Trend Micro regularly releases
component updates through the Trend Micro ActiveUpdate server.
|
ddi66-p.activeupdate.trendmicro.com/activeupdate:443 |
Related to product version and region
|
Certified Safe Software Service (CSSS)
|
Verifies the safety of files. Certified Safe Software Service
reduces false positives, and saves computing time and resources.
|
grid-global.trendmicro.com:443 |
|
Community Domain/IP Reputation Service
|
Determines the prevalence of detected domains and
IP addresses. Prevalence is a statistical concept referring to the number of times
a domain or IP address was detected by Trend Micro
sensors at a given time.
|
ddi660-en-domaincensus.trendmicro.com:443 |
Related to product version and region
|
Community File Reputation
|
Determines the prevalence of detected files. Prevalence is a
statistical concept referring to the number of times a file was detected by Trend Micro sensors at a given
time.
|
ddi660-en-census.trendmicro.com:443 |
Related to product version and region
|
Customer Licensing Portal
|
Manages your customer information, subscriptions, and product
or service license.
|
licenseupdate.trendmicro.com:443 |
|
Deep Discovery Director - Network Analytics as a Service
|
A hosted service that provides advanced threat analysis on
historical network data based network detections, and other related events as they
occur over time.
|
*.nacloud.trendmicro.com:443 |
Related to product version and region
|
Dynamic URL Scanning
|
Performs real-time analysis of URLs to detect zero-day
attacks.
|
ddi6-6-en-t0.url.trendmicro.com:443 |
Related to product version and region
Disabled when using Smart Protection Server
|
Mobile App Reputation Service (MARS)
|
Collects data about detected threats in mobile devices. Mobile App Reputation
Service is an advanced sandbox environment that analyzes mobile app runtime
behavior to detect privacy leaks, repacked mobile apps, third-party advertisement
SDKs, vulnerabilities, and app categories.
|
rest.mars.trendmicro.com:443 |
|
Predictive Machine Learning engine
|
Through use of malware modeling, Predictive Machine
Learning compares samples to the malware models, assigns a probability score, and
determines the probable malware type that a file contains.
|
ddi66-en-f.trx.trendmicro.com:443 |
Related to product version and region
|
Retro Scan
|
A cloud-based service that scans historical web access logs
for callback attempts to C&C servers and other related activities in your
network.
|
intelliconnect.trendmicro.com:443
ddi66.retroscan.trendmicro.com:443 |
Related to product version and region
|
Sandbox as a Service (for macOS)
|
A hosted service that analyzes possible threats for
macOS.
|
ddaaas.trendmicro.com:443 |
|
Sandbox as a Service
|
A hosted service that analyzes possible threats.
|
*.ddcloud.trendmicro.com:443 |
Related to product version and region
If the product was registered to the service before a product upgrade was performed,
Trend Micro recommends that you re-register to the service to connect to the new address.
|
Smart Feedback
|
Shares threat information with the Smart Protection Network,
allowing Trend Micro to rapidly
identify and address new threats. Trend Micro Smart Feedback may include product information such as the
product name, ID, and version, as well as detection information including file
types, SHA-1 hash values, URLs, IP addresses, and domains.
|
ddi660-en.fbs25.trendmicro.com:443 |
Related to product version and region
|
Threat Connect
|
Correlates suspicious objects detected in your environment and
threat data from the Trend Micro
Smart Protection Network. The resulting intelligence reports enable you to
investigate potential threats and take actions pertinent to your attack
profile.
|
ddi66.threatconnect.trendmicro.com:443 |
Related to product version and region
|
Trend Vision One
|
Extends detection and response beyond the endpoint to offer broader visibility and
expert security analytics, leading to more detections and an earlier, faster response.
With Trend Vision One, you can respond more effectively to threats, minimizing the
severity and scope of a breach.
|
*.xdr.trendmicro.com:443 |
Related to product version and region
|
Trend Vision One - Network Inventory
|
Enables connection to Trend Vision One.
|
api-ni*.xdr.trendmicro.com:443 *.dddxdr.trendmicro.com:443 |
Related to product version and region
|
Web Inspection Service
|
Web Inspection Service is an auxiliary service of Web
Reputation Services, providing granular levels of threat results and comprehensive
threat names to users.
The threat name and severity can be used as filtering criteria
for proactive actions and further intensive scanning.
|
ddi6-6-en-wis.trendmicro.com:443 |
Related to product version and region
|
Web Reputation Services
|
Tracks the credibility of web domains. Web Reputation Services
assigns reputation scores based on factors such as a website's age, historical
location changes, and indications of suspicious activities discovered through
malware behavior analysis.
|
ddi6-6-en.url.trendmicro.com:443 |
Related to product version and region
|