Network Ports Configuration for Enhanced Security Model with Cloud Communication Server Parent topic

If you are using the enhanced security model (dual server installation) with Cloud Communication Server, configure the following network ports for Mobile Security components:
Component
Network Ports
Details
Management Server
Open the following ports:
  • HTTPS port 443 for the following:
    • Inbound connections to Management Server.
    • If you want to add external applications from Google Play.
      The host name for the Google Play store is: play.google.com.
    • If you want to take advantage of Trend Micro's mobile application reputation service (MARS) and see the security information of the uploaded APK files.
      The host name of the MARS server is: rest.mars.trendmicro.com
    Note
    Note
    This is the default HTTPS port number. If you want to change the HTTPS port number that you want to use for Management Server, see Configuring Management Server Settings for the details.
  • HTTP port 80, for the following:
    • License server
      The host name for the license server is: licenseupdate.trendmicro.com
    • If you use Trend Micro ActiveUpdate server as the update source.
      The host name of the ActiveUpdate server is mobilesecurity.activeupdate.trendmicro.com.
Used for accessing the Mobile Security administration Web console.
Management Server
Open the following ports:
  • HTTP port 80 and HTTPS port 443 for the following:
    • Outbound connections to Cloud Communication Service
    • If you want to add external iOS apps from Apple App Store
      The host name for the Apple App Store is: itunes.apple.com.
    • If you want to use category-based application control for iOS mobile devices
    Add the following two Cloud Communication Service hosts in the firewall exceptions:
    • ccs01.trendmicro.com
    • ccs02.trendmicro.com
Used for accessing the Mobile Security administration Web console.
Simple Certificate Enrollment Protocol (SCEP) Server
Open HTTP port 80 for Communication Server and iOS mobile devices.
Used for iOS mobile devices enrollment.
If you are not using SCEP server to manage iOS mobile devices, this port is not required.
SQL Server
Open the following ports:
  • TCP port 1433 for Management Server.
  • UDP port 1434 for Management Server.
Note
Note
This is the default TCP port to connect to the SQL Server. However, you can also use a different port for SQL server, if required.
Establishes a connection between the Management Server and the remote SQL server.