Views:
The following table shows the ports that are used with Deep Discovery Email Inspector and why they are used.

Ports used by Deep Discovery Email Inspector

Port
Protocol
Function
Purpose
22
TCP
Listening
Endpoints connect to Deep Discovery Email Inspector through SSH.
25
TCP
Listening
MTAs and mail servers connect to Deep Discovery Email Inspector through SMTP.
53
TCP/UDP
Outbound
Deep Discovery Email Inspector uses this port for:
  • DNS resolution
  • Sender authentication (SPF, DKIM, DMARC) query
80
TCP
Listening and outbound
Deep Discovery Email Inspector connects to other computers and integrated Trend Micro products and hosted services through this port.
  • Connect to the Customer Licensing Portal to manage the product licenses
  • Query Community File Reputation Services
  • Query Community Domain/IP Reputation Services
  • Query Web Reputation Services through the Smart Protection Network
  • Upload virtual analyzer images to Deep Discovery Email Inspector using the image import tool
  • Communicate with Trend Micro Apex Central if Deep Discovery Email Inspector is registered over HTTP
123
UDP
Outbound
Deep Discovery Email Inspector connects to the NTP server to synchronize time.
161
UDP
Listening
Deep Discovery Email Inspector uses this port to listen for requests from SNMP managers.
162
UDP
Outbound
Deep Discovery Email Inspector connects to SNMP mangers to send SNMP trap messages.
443
TCP
Listening and outbound
Deep Discovery Email Inspector uses this port to:
  • Query Predictive Machine Learning engine
  • Query Web Inspection Service
  • Access the management console with a computer through HTTPS
  • Communicate with Trend Micro Apex Central
  • Connect to the Smart Protection Network and query Web Reputation Services
  • Connect to Trend Micro Threat Connect
  • Send protected threat information to Smart Feedback
  • Update components by connecting to the ActiveUpdate server
  • Send product usage information to Trend Micro feedback servers
  • Verify the safety of files through the Certified Safe Software Service
  • Communicate with Deep Discovery Director - On-premises version
  • Share threat intelligence information and exception list with other products
4459
TCP
Listening and outbound
Endpoints connect to the End-User Quarantine console on Deep Discovery Email Inspector through this port.
5274
TCP
Outbound
Deep Discovery Email Inspector uses this port as the default port to connect to the Smart Protection Server for web reputation services.
User-defined
N/A
Outbound
Deep Discovery Email Inspector uses specified ports to:
  • Send logs to syslog servers
  • Share threat intelligence with integrated products/services
  • Upload detection logs to SFTP servers
  • Communicate with and Check Point Open Platform for Security (OPSEC)
  • Connect to an LDAP server for third-party authentication and LDAP query