Views:
Deep Discovery Director (Consolidated Mode) accesses several Trend Micro services to obtain information about emerging threats and to manage your existing Trend Micro products. The following table describes each service and provides the required address and port information accessible to the product version in your region.
Note
Note
All services connect using HTTPS with TLS 1.2 or above. If your environment has man-in-the-middle devices, verify that the devices support TLS 1.2 or above.

Service Addresses and Ports

Service
Description
Address and Port
Notes
ActiveUpdate Server
Provides updates for product components, including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.
ddd53-p.activeupdate.trendmicro.com/activeupdate:443
Related to product version
Customer Licensing Portal
Manages your customer information, subscriptions, and product or service license.
licenseupdate.trendmicro.com:443
  
Deep Discovery Director - Network Analytics as a Service
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.
api.nacloud.trendmicro.com:443
api.eu.nacloud.trendmicro.com:443
api.jp.nacloud.trendmicro.com:443
api.sg.nacloud.trendmicro.com:443
api.us.nacloud.trendmicro.com:443
Related to product region
Documentation Server
Hosts all Trend Micro product documentation. If Deep Discovery Director (Consolidated Mode) is unable to connect to the server, a local copy of the product documentation will be displayed instead.
docs.trendmicro.com:80
docs.trendmicro.com:443
  
Email Encryption
Encrypts and decrypts email messages with registered domains using Identity-based Encryption (IBE) for secure private information delivery.
root.ibe-ta.com:80
public.ibe-ta.com:80
ppconfig.ibe-ta.com:80
  
Proxy Connection Test
Deep Discovery Director (Consolidated Mode) establishes a connection to this remote file to verify the validity of proxy settings.
http://www.msftncsi.com/ncsi.txt
 
Threat Connect
Correlates suspicious objects detected in your environment and threat data from the Trend Micro Smart Protection Network. The resulting intelligence reports enable you to investigate potential threats and take actions pertinent to your attack profile.
ddd53-threatconnect.trendmicro.com:443
Related to product version
Trend Micro Vision One
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Micro Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.
*.xdr.trendmicro.com:443
*.xdr.trendmicro.co.jp:443
Related to product version and region