Deep Discovery Director (Consolidated Mode) accesses several Trend Micro services to obtain information about emerging threats and to manage your existing Trend Micro products. The following table describes each service and provides the required address and port information accessible to the product version in your region.
All services connect using HTTPS with TLS 1.2 or above. If your environment has man-in-the-middle devices, verify that the devices support TLS 1.2 or above.
|
Service |
Description |
Address and Port |
Notes |
|---|---|---|---|
|
ActiveUpdate Server |
Provides updates for product components, including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server. |
ddd53-p.activeupdate.trendmicro.com/activeupdate:443 |
Related to product version |
|
Customer Licensing Portal |
Manages your customer information, subscriptions, and product or service license. |
licenseupdate.trendmicro.com:80 |
|
|
Deep Discovery Director - Network Analytics as a Service |
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time. |
api.nacloud.trendmicro.com:443 api.eu.nacloud.trendmicro.com:443 api.jp.nacloud.trendmicro.com:443 api.sg.nacloud.trendmicro.com:443 api.us.nacloud.trendmicro.com:443 |
Related to product region |
|
Documentation Server |
Hosts all Trend Micro product documentation. If Deep Discovery Director (Consolidated Mode) is unable to connect to the server, a local copy of the product documentation will be displayed instead. |
docs.trendmicro.com:80 docs.trendmicro.com:443 |
|
|
Email Encryption |
Encrypts and decrypts email messages with registered domains using Identity-based Encryption (IBE) for secure private information delivery. |
root.ibe-ta.com:80 public.ibe-ta.com:80 ppconfig.ibe-ta.com:80 |
|
|
Proxy Connection Test |
Deep Discovery Director (Consolidated Mode) establishes a connection to this remote file to verify the validity of proxy settings. |
http://www.msftncsi.com/ncsi.txt |
|
|
Threat Connect |
Correlates suspicious objects detected in your environment and threat data from the Trend Micro Smart Protection Network. The resulting intelligence reports enable you to investigate potential threats and take actions pertinent to your attack profile. |
ddd53-threatconnect.trendmicro.com:443 |
Related to product version |
|
Trend Micro Vision One |
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Micro Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach. |
*.xdr.trendmicro.com:443 *.xdr.trendmicro.co.jp:443 |
Related to product version and region |