Agent connection status: If the Security Agent can connect to the Trend Micro Apex One server or any of the assigned reference servers on the Internet, the endpoint's location is internal. Additionally, if any endpoint outside the corporate network can establish connection with the Trend Micro Apex One server/reference server, its location is also internal. If none of these conditions apply, the endpoint's location is external.

Gateway IP and MAC address: If the Security Agent endpoint's gateway IP address matches any of the gateway IP addresses you specified on the Endpoint Location screen, the endpoint's location is internal. Otherwise, the endpoint's location is external.