Views:
The following firewall exceptions apply to networks with a Service Gateway installed and cloud service extension turned on.
For more information, see cloud service extension.
Important
Important
The cloud service extension reduces firewall exceptions but causes network latency.

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • All
  • xlogr-ue1.xdr.trendmicro.com

Zero Trust Secure Access Exceptions

Service
Region
Exceptions
Authentication
  • All
  • agent-us-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • All
  • auth.ztsa-iag.trendmicro.com
  • pac.us.ztsa-iag.trendmicro.com
  • auth.us.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All
  • proxy.ztsa-iag.trendmicro.com
  • USA
  • proxy.us.ztsa-iag.trendmicro.com
  • Brazil
  • proxy-br.us.ztsa-iag.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network Proxy: Off
  • All
  • xlogr-ue1.xdr.trendmicro.com
  • api.us-east-1.en.ddcloud.trendmicro.com
  • iwsh30-en.url.trendmicro.com
  • api.crs.trendmicro.com
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network Proxy: Off
  • All
  • xlogr-ue1.xdr.trendmicro.com
  • api.us-east-1.en.ddcloud.trendmicro.com
  • ctapi.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Private Access Connector
Australia
  • 20.5.69.128/28
Europe
  • 20.4.51.32/28
India
  • 20.219.254.160/28
Japan
  • 52.140.246.128/28
Singapore
  • 52.187.118.64/28
United States
  • 20.7.52.240/28
Brazil
  • 4.228.193.144/28

Service Gateway Exceptions

Service
Region
Exceptions
Firmware
  • All
  • sgi-iot.xdr.trendmicro.com
  • api.xdr.trendmicro.com
  • us.services.trendmicro.com
Smart Protection Network proxy: On
  • All
  • ctapi.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • activeupdate.trendmicro.com
Smart Protection Network proxy: Off
  • All
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
  • grid-global.trendmicro.com
  • rest.mars.trendmicro.com
  • sg-tmsps10-en.gfrbridge.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • sg-tmsps10-en-backup.url.trendmicro.com
  • activeupdate.trendmicro.com
Local ActiveUpdate
  • All
Refer to ActiveUpdate session of each product/agent

Network Inventory Exceptions

Service
Region
Exceptions
Virtual Network Sensor
United States
  • xns-p.activeupdate.trendmicro.com
  • api.us.xdr.nacloud.trendmicro.com
  • xns-en.fbs25.trendmicro.com
  • xlogr-ue1.xdr.trendmicro.com
  • api-ni.xdr.trendmicro.com
  • licenseupdate.trendmicro.com
  • api.ddcloud.trendmicro.com
  • api.en.ddcloud.trendmicro.com
Deep Discovery Inspector
United States
Refer to Service Gateway Exceptions