Collapse AllExpand All
  • activation code format [1]
  • Active Directory
  • administration Web console [1] [2]
    • operations [1]
    • URL [1]
    • username and password [1]
  • Administrator Reports download [1]
  • advanced search [1]
  • Android settings
    • push notifications [1]
  • anti-malware scanning [1]
  • APNs certificate
  • Apple store [1]
  • application control [1]
  • BlackBerry [1]
  • call filtering [1]
    • filtering list configuration [1]
    • filtering list format [1]
  • clearing corporate data on mobile devices [1]
  • command queue [1]
  • command statuses [1]
  • common settings
    • Communication Server type [1]
    • information collection frequency [1]
  • Communication Server Connection Settings [1] [2]
  • Communication Server settings [1]
    • Android settings [1]
    • common settings [1]
    • iOS settings [1]
    • Windows Phone settings [1]
  • Compatibility View [1]
  • compliance policy
    • check list [1]
  • component updates
    • about [1]
    • download sources [1]
    • local AU server [1]
    • manual [1]
    • scheduled [1]
  • configuration.xml file [1]
  • contacting [1]
    • documentation feedback [1]
  • control manager [1]
  • Control Manager integration [1]
  • corporate certificates [1] [2] [3]
  • Dashboard
    • application control status [1]
    • encryption status [1]
    • information management [1]
    • jailbreak/root status [1]
    • mobile device status [1]
    • patch and component update status [1]
    • server update status [1]
  • data security improvement [1]
  • device enrollment [1]
  • device information [1]
  • device status [1]
  • device tree [1]
  • documentation feedback [1]
  • enrollment settings
    • authentication [1]
    • enrollment key [1]
  • enterprise app store [1] [2]
  • Eula_agreement.zip file [1]
  • event log [1]
  • Exchange ActiveSync Devices tab [1]
  • Exchange Connector [1]
  • Exchange Server
    • ExchangeConnector.zip file [1]
    • Management Tools [1] [2]
    • supported versions [1]
  • Exchange Server integration [1]
  • export log [1]
  • firewall policy
    • exception rule settings [1]
    • IDS [1]
    • security levels [1]
    • SYN Flood attack [1]
  • Full license version [1]
  • General Policy
    • log settings [1]
    • uninstall protection features [1]
    • update settings [1]
  • Invited Devices tab [1]
    • invitation email information [1]
    • invitation statuses [1]
  • iOS device provisioning [1] [2]
  • iOS management [1] [2] [3]
  • iOS settings
    • APNs certificate [1]
    • SCEP settings [1]
  • IPv6 support [1]
  • Knowledge Base [1]
  • known issues [1]
  • latest documentation [1]
  • LCS installation
    • creating certificate [1]
    • importing certificate [1]
    • SSL certificate [1]
  • locate iOS mobile devices [1]
  • locking a mobile device [1]
  • lock policy enhancement [1]
  • Malware Protection Policy
    • scan options [1]
    • scan types [1]
  • Management Server
    • default port number [1]
  • MARS [1] [2]
  • MDA enrollment
  • MDA installation methods [1]
  • MDA logs
    • about [1]
    • Event Log [1]
    • log types [1]
    • Malware Protection Log [1]
    • Policy Violation Log [1]
    • Privacy Log [1]
    • query criteria [1]
    • Web Threat Protection Log [1]
  • Microsoft Exchange Server Management Tools [1]
  • mobile device authentication [1]
  • mobile device enrollment [1]
  • Mobile Security
    • about [1]
    • Active Directory [1]
    • certificate
      • APNs certificate [1]
      • authority [1]
      • management [1]
      • public and private keys [1]
      • SCEP [1]
      • security credentials [1]
      • SSL certificate [1]
    • Cloud Communication Server [1]
    • Communication Server [1]
    • Communication Server types [1]
    • components [1]
    • encryption software compatibility [1]
    • Exchange Connector [1]
    • Local Communication Server [1]
    • Management Server [1]
    • Microsoft SQL Server [1]
    • Mobile Device Agent [1]
    • OfficeScan [1]
    • SMTP server [1]
    • sub-groups [1]
    • unwanted network communications [1]
  • mobile threats [1]
    • spam messages [1]
  • multiple administrator accounts [1]
  • notifications and reports
    • about [1]
    • email message configuration [1]
    • notifications [1]
    • reports [1]
    • token variables [1] [2]
  • OfficeScan [1]
  • optional Cloud Communication Server [1]
  • password
    • reset password [1]
    • uninstall protection [1]
  • password protection [1]
  • per-app VPN [1]
  • Policy Violation Log [1]
  • port configuration
    • Basic Security Model
    • Cloud Communication Server
    • Local Communication Server
      • Active Directory [1]
      • Communication Server [1]
      • Management Server [1] [2]
      • SCEP Server [1]
      • SQL Server [1]
  • privacy scan [1]
  • QR-code [1]
  • regular updates [1]
  • resources
    • Internet-based tools and services [1]
  • risk evaluation [1]
  • root account properties [1]
  • Samsung KNOX [1]
  • SCEP
    • Certificate Authority [1]
    • Network Device Enrollment Service [1]
  • send email alert [1]
  • server command confirmation [1]
  • single sign-on [1]
  • SMS anti-spam [1]
  • SMS sender [1]
  • software update
    • about [1]
    • readme file [1]
    • release items [1]
  • spam
    • SMS [1]
      • filtering list configuration [1]
      • filtering list format [1]
    • WAP-Push [1]
      • approved list format [1]
  • standalone management server [1]
  • Super Administrator role properties [1]
  • supervised device management [1]
  • Symbian [1]
  • Technical Support Web site [1]
  • template [1]
  • template-based policies [1]
  • TmDatabase.ini [1] [2]
  • TrendLabs [1]
  • Trend Micro
  • troubleshooting tips [1]
    • .pac automatic configuration file [1]
    • client device list [1]
    • Communication Server [1]
    • devenv.exe.config configuration file [1]
    • Out of Sync [1]
    • SCEP certificate [1]
    • SQL Server 2005 [1]
    • SQL Server 2008 R2 [1]
    • SQL Server Express [1]
    • system clock [1]
  • updated device statuses [1]
  • updated MDA interface [1]
  • user account details [1]
  • Volume Purchase Program [1]
  • WAP-Push protection [1]
  • Web security [1]
  • Web threat
    • filtering list configuration [1]
    • filtering list format [1] [2]
    • limited adult content [1]
    • specific Web site only [1]
  • Web threat protection [1]
  • what’s new
  • widgets [1] [2]
  • Wi-Fi hotspot [1]
  • Windows Mobile [1]
  • Windows Phone [1]
  • worldwide support offices [1]

Network Ports Configuration for Enhanced Security Model with Local Communication Server Parent topic

If you are using the enhanced security model (dual server installation) with Local Communication Server, configure the following network ports for Mobile Security components:
Component
Network Ports
Details
Management Server
Open the following ports:
  • HTTPS port 443 for the following:
    • Inbound connections to Mobile Security server.
    • If you want to add external applications from Google Play.
      The host name for the Google Play store is: play.google.com.
    • If you want to take advantage of Trend Micro's mobile application reputation service (MARS) and see the security information of the uploaded APK files.
      The host name of the MARS server is: rest.mars.trendmicro.com
    Note
    Note
    This is the default HTTPS port number. If you want to change the HTTPS port number that you want to use for Management Server, see Configuring Management Server Settings for the details.
  • HTTP port 80, for the following:
    • License server
      The host name for the license server is: licenseupdate.trendmicro.com
    • If you use Trend Micro ActiveUpdate server as the update source.
      The host name of the ActiveUpdate server is mobilesecurity.activeupdate.trendmicro.com.
Used for accessing the Mobile Security administration Web console.
Management Server
Open the following ports:
  • HTTP port 80 and HTTPS port 443 for the following:
    • If you want to add external iOS apps from Apple App Store
      The host name for the Apple App Store is: itunes.apple.com.
    • If you want to use category-based application control for iOS mobile devices
Used for accessing the Mobile Security administration Web console.
Communication Server
Open HTTP port 8080.
Note
Note
This is the default HTTP port number for the dual server configuration. If you want to change the HTTP port number that you want to use for mobile devices to communicate with the Communication Server during the installation, see Configuring Common Communication Server Settings for the details.
Used for communication between mobile devices and the Communication Server.
Open HTTPS port 4343.
Note
Note
This is the default HTTPS port number for the dual server configuration.
Used for secure communication between mobile devices and the Communication Server.
Open TCP port 2195 for Apple Push Notification service (APNs) server. The hostname of Apple Push Notification Service is gateway.push.apple.com.
Enables Apple’s APNs server to manage iOS mobile devices.
If you are not using APNs server to manage iOS mobile devices, this port is not required.
Open the TCP port 4343. This is the default port to allow inbound connection to Communication Server from Management Server. If you want to change the HTTP port number that you want to use for mobile devices to communicate with the Communication Server during the installation, see Configuring Common Communication Server Settings for the details.
Establishes a connection between the Management Server and the Communication Server.
Open the TCP port 443.
Establishes a connection between the Local Communication Server and the Cloud Communication Server.
Active Directory
Open one of the following ports:
  • TCP port 389 (Domain Controller) for Management Server
  • TCP port 3268 (Global Category) for Management Server
Used for user authentication using Active Directory.
If you are not using Active Directory to authenticate or import users, this port is not required.
Simple Certificate Enrollment Protocol (SCEP) Server
Open HTTP port 80 for Communication Server and iOS mobile devices.
Used for iOS mobile devices enrollment.
If you are not using SCEP server to manage iOS mobile devices, this port is not required.
SQL Server
Open the following ports:
  • TCP port 1433 for Management Server
  • UDP port 1434 for Management Server
Note
Note
TCP port 1433 is the default port to connect to the SQL Server. However, you can also use a different TCP port for SQL server, if required.
Establishes a connection between the Communication Server and the Management Server with the remote SQL server.