Views:
The following firewall exceptions apply to networks with a Service Gateway installed and cloud service extension turned on. For more information, see cloud service extension.
Important
Important
The cloud service extension reduces firewall exceptions but causes network latency.

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • All
  • api-ca.xbc.trendmicro.com
  • errs-ca.mgcp.trendmicro.com
  • er-ws-ca.xdr.trendmicro.com
Zero Trust Secure Access Exceptions
Service
Region
Exceptions
Access Module
  • All
  • prod.ztsaagent.trendmicro.com
  • upload.xdr.trendmicro.com
  • event-us.ztsaagent.trendmicro.com
Authentication
  • All
  • agent-us-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • America Regions
  • auth.ztsa-iag.trendmicro.com
  • pac.ca.ztsa-iag.trendmicro.com
  • auth.ca.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All
  • proxy.ztsa-iag.trendmicro.com
  • proxy.ca.ztsa-iag.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network Proxy: Off
  • All
  • xlogr-ue1.xdr.trendmicro.com
  • api.us-east-1.en.ddcloud.trendmicro.com
  • iwsh30-en.url.trendmicro.com
  • api.crs.trendmicro.com
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network Proxy: On
  • All
  • xlogr-ue1.xdr.trendmicro.com
  • api.us-east-1.en.ddcloud.trendmicro.com
  • ctapi.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Private Access Connector
Australia
  • 20.5.69.128/28
Europe
  • 20.4.51.32/28
India
  • 20.219.254.160/28
Israel
  • 20.217.194.0/28
Japan
  • 52.140.246.128/28
Singapore
  • 52.187.118.64/28
United States
  • 20.7.52.240/28
Brazil
  • 4.228.193.144/28
Colombia
  • 158.247.121.198
  • 149.130.166.153
MEA
  • 20.74.229.224/28
United Kingdom
  • 20.0.229.192/28
Canada
  • 40.82.166.0/28

Service Gateway Exceptions

Service
Region
Exceptions
Firmware
  • Canada
  • sgi-tunneling.ca.xdr.trendmicro.com
  • sgi-iot.ca.xdr.trendmicro.com
  • api.ca.xdr.trendmicro.com
  • upload..ca.xdr.trendmicro.com
Smart Protection Network proxy: On
  • All
  • ctapi.trendmicro.com
Smart Protection Network proxy: Off
  • All
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
  • grid-global.trendmicro.com
  • rest.mars.trendmicro.com
  • sg-tmsps10-en.gfrbridge.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
Local ActiveUpdate
  • All
Refer to ActiveUpdate session of each product/agent

Network Inventory

Service
Region
Exceptions
Virtual Network Sensor
Canada
Refer to the Virtual Network Sensor exceptions in Firewall exceptions: Canada - all exceptions
Deep Discovery Inspector
Canada
Refer to the Deep Discovery Inspector exceptions in Firewall exceptions: Canada - all exceptions