Network Ports Configuration for Basic Security Model Parent topic

If you are using the basic security model (single server installation), configure the following network ports for Mobile Security components:
Component
Network Ports
Details
Management Server and Local Communication Server
Open the following ports:
  • HTTPS port 443 for the following:
    • Inbound connections to Mobile Security server.
    • If you want to add external applications from Google Play.
      The host name for the Google Play store is: play.google.com.
    • If you want to take advantage of Trend Micro's mobile application reputation service (MARS) and see the security information of the uploaded APK files.
      The host name of the MARS server is: rest.mars.trendmicro.com
    Note
    Note
    This is the default HTTPS port number. If you want to change the HTTPS port number that you want to use for Management Server, see Configuring Management Server Settings for the details.
  • HTTP port 80, for the following:
    • License server
      The host name for the license server is: licenseupdate.trendmicro.com
    • If you use Trend Micro ActiveUpdate server as the update source.
      The host name of the ActiveUpdate server is mobilesecurity.activeupdate.trendmicro.com.
User for accessing the Mobile Security administration Web console.
Management Server and Local Communication Server
Open the following ports:
  • HTTP port 80 and HTTPS port 443 for the following:
    • If you want to add external iOS apps from Apple App Store
      The host name for the Apple App Store is: itunes.apple.com.
    • If you want to use category-based application control for iOS mobile devices
User for accessing the Mobile Security administration Web console.
Management Server and Local Communication Server
Open HTTP port 8080.
Note
Note
This is the default HTTP port number for the dual server configuration.
Used for communication between mobile devices and the Mobile Security server.
Open HTTPS port 4343.
Note
Note
This is the default HTTPS port number for the dual server configuration. If you want to change the HTTP port number that you want to use for mobile devices to communicate with the Communication Server during the installation, see Configuring Common Communication Server Settings for the details.
Used for secure communication between mobile devices and the Mobile Security Server.
Open TCP port 2195 for Apple Push Notification service (APNs) server. The hostname of Apple Push Notification Service is gateway.push.apple.com.
Enables Apple’s APNs server to manage iOS mobile devices.
If you are not managing iOS mobile devices, this port is not required.
Open the TCP port 443.
Establishes the connection between the Local Communication Server and the Cloud Communication Server.
Active Directory
Open one of the following ports:
  • TCP port 389 (Domain Controller) for Management Server
  • TCP port 3268 (Global Category) for Management Server
Used for user authentication using Active Directory.
If you are not using Active Directory to authenticate or import users, this port is not required.
Simple Certificate Enrollment Protocol (SCEP) Server
Open HTTP port 80 for Communication Server and iOS mobile devices.
Used for iOS mobile devices enrollment.
If you are not using SCEP server to manage iOS mobile devices, this port is not required.
SQL Server
Open the following ports:
  • TCP port 1433 for Mobile Security server.
  • UDP port 1434 for Mobile Security server.
Note
Note
This is the default TCP port to connect to the SQL Server. However, you can also use a different port for SQL server, if required.
Establishes a connection between the Mobile Security server and the remote SQL server.