Views:
The following section shows the ports that are used with Deep Discovery Inspector and why they are used.

Port 22

Port
22
Protocol
TCP
Function
Listening
Purpose
Deep Discovery Inspector uses this port to:
  • Connect to the preconfiguration console
  • Send logs and data to the Threat Management Services Portal if Deep Discovery Inspector is registered over SSH

Port 25

Port
25
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector sends notifications and scheduled reports through SMTP.

Port 53

Port
53
Protocol
TCP/UDP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port for DNS resolution.

Port 67

Port
67
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector sends requests to the DHCP server if IP addresses are assigned dynamically.

Port 68

Port
68
Protocol
UDP
Function
Listening
Purpose
Deep Discovery Inspector receives responses from the DHCP server.

Port 80

Port
80
Protocol
TCP
Function
Listening
Purpose
Deep Discovery Inspector connects to other computers and integrated Trend Micro products and hosted services through this port.
  • Share threat intelligence information with other products
Function
Outbound
Purpose
Deep Discovery Inspector connects to other computers and integrated Trend Micro products and hosted services through this port.
  • Communicate with Trend Micro Apex Central if Deep Discovery Inspector is registered over HTTP
  • Update components by connecting to the ActiveUpdate server

Port 123

Port
123
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to connect to the NTP server to synchronize time.

Port 137

Port
137
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector uses NetBIOS to resolve IP addresses to host names.

Port 161

Port
161
Protocol
UDP
Function
Listening
Purpose
Deep Discovery Inspector uses this port for SNMP agent listening and protocol translation.

Port 162

Port
162
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to send SNMP trap notifications.

Port 389

Port
389
Protocol
TCP/UDP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to retrieve user information from LDAP servers.
Note
Note
This is the default port. Configure this port through the management console.

Port 443

Port
443
Protocol
TCP
Function
Listening
Purpose
Deep Discovery Inspector uses this port to:
  • Access the management console with a computer through HTTPS
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to:
  • Communicate with Deep Discovery Director - On-premises version
    Note
    Note
    This is the default port. Configure this port through the management console.
  • Communicate with Trend Micro Apex Central
    Note
    Note
    This is the default port. Configure this port through the management console.
  • Communicate with Trend Micro Service Gateway
  • Communicate with Trend Vision One
  • Connect to MITRE ATT&CK™ Tactics and Techniques website
  • Connect to Trend Micro Threat Connect
  • Query Mobile App Reputation Service through Smart Protection Server
  • Query Predictive Machine Learning engine
  • Query the Web Reputation Services blocking reason
  • Register to the mitigation server
  • Scan APK files and send detection information to the Mobile App Reputation Service
  • Send files to Deep Discovery Analyzer for sandbox analysis
    Note
    Note
    This is the default port. Configure this port through the management console.
  • Send logs and data to the Threat Management Services Portal if Deep Discovery Inspector is using SSL encryption
  • Share anonymous threat information with the Smart Protection Network
  • Share threat intelligence information with Trend Micro TXOne OT Defense Console
  • Verify the safety of files through the Certified Safe Software Service

Port 465

Port
465
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector sends notifications and scheduled reports through SMTP over TCP with SSL/TLS encryption.

Port 514

Port
514
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector sends logs to a syslog server over UDP.
Note
Note
The port must match the syslog server.
Note
Note
This is the default port. Configure this port through the management console.

Port 587

Port
587
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector sends notifications and scheduled reports through SMTP over TCP with STARTTLS encryption.

Port 601

Port
601
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to send logs to a syslog server.
Note
Note
The port must match the syslog server.
Note
Note
This is the default port. Configure this port through the management console.

Port 636

Port
636
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to retrieve user information from LDAP servers.
Note
Note
This is the default port. Configure this port through the management console.

Port 3268

Port
3268
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to retrieve user information from LDAP servers.

Port 3269

Port
3269
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector uses this port to retrieve user information from LDAP servers.

Port 4343

Port
4343
Protocol
TCP
Function
Outbound
Purpose
Communicate with Smart Protection Server

Port 5275

Port
5275
Protocol
TCP
Function
Outbound
Purpose
  • Query Web Reputation Services through Smart Protection Server using HTTPS
  • Query Web Reputation Services through Service Gateway Smart Protection Server using HTTPS

Port 6514

Port
6514
Protocol
TCP
Function
Outbound
Purpose
Deep Discovery Inspector sends logs to a syslog server over TCP with SSL encryption.
Note
Note
The port must match the syslog server.
Note
Note
This is the default port. Configure this port through the management console.

Port 8514

Port
8514
Protocol
UDP
Function
Outbound
Purpose
Deep Discovery Inspector sends syslog information to Deep Discovery Advisor if Deep Discovery Inspector is integrated with Deep Discovery Advisor.
Note
Note
This is the default port. It can be configured through the management console, and it must match the syslog settings on Deep Discovery Advisor.

Port 8080

Port
8080
Protocol
TCP
Function
Listening
Purpose
Deep Discovery Inspector uses this port to share threat intelligence with other products.
Note
Note
This is the default port. Configure this port through the management console.