Views:
The following firewall exceptions apply to networks with:

Trend Vision One Authentication

Service
Region
Exceptions
Trend Vision One
  • All
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • All
  • assessment-eu1.mgcp.trendmicro.com
  • release-us1.mgcp.trendmicro.com
  • api-eu1.xbc.trendmicro.com
  • tgw-eu1.mgcp.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.manage.trendmicro.com
  • cloudendpoint-eu1.mgcp.trendmicro.com
  • er-ws-ec1.xdr.trendmicro.com
  • era-ec1.xdr.trendmicro.com
  • endpointpolicy-cdn-eu1.xbc.trendmicro.com
  • files.trendmicro.com
  • xlogr-ec1.xdr.trendmicro.com
  • api.eu.xdr.trendmicro.com
  • api-cert.eu.xdr.trendmicro.com
  • upload.eu.xdr.trendmicro.com
  • wsc-eu1.xbc.trendmicro.com
  • api-ap3.xbc.trendmicro.com
  • cdn-api-ap3.xbc.trendmicro.com
  • files.trendmicro.com
  • ipv6-iaus.trendmicro.com
  • ipv6-iaus.activeupdate.trendmicro.com
  • iaus.activeupdate.trendmicro.com
  • iaus.trendmicro.com
Endpoint Sensor Agents with Sandbox Analysis
  • All
  • sandbox-threatconnect.trendmicro.com
Standard Endpoint Protection Agents
  • All
  • <Apex One console_DNS>.manage.trendmicro.com
    (refer to license email)
  • licenseupdate.trendmicro.com
  • asm01-emea-prod.aot.trendmicro.com
  • api-emea.aot.trendmicro.com
  • osce14-p.activeupdate.trendmicro.com
  • tmsm35-p.activeupdate.trendmicro.com
  • activeupdate.trendmicro.com
  • osce14.icrc.trendmicro.com
  • osce14-0-en.url.trendmicro.com
  • osce140-en.fbs25.trendmicro.com
  • osce14-en.gfrbridge.trendmicro.com
  • osce14-en-census.trendmicro.com
  • osce14bak-en-census.trendmicro.com
  • osce140-en-f.trx.trendmicro.com
  • oscecmp140-en-f.trx.trendmicro.com
  • osce140-en-b.trx.trendmicro.com
  • mcs.trendmicro.com
  • www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/
  • files.trendmicro.com
  • aurd-test2.activeupdate.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • support-connector-service.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.blob.core.windows.net
  • aurd-test2.activeupdate.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • support-connector-service.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.blob.core.windows.net
Server & Workload Protection Agents
  • All regions
  • files.trendmicro.com
  • iaus.activeupdate.trendmicro.com
  • iaus.trendmicro.com
  • ipv6-iaus.trendmicro.com
  • ipv6-iaus.activeupdate.trendmicro.com
  • dsaas1100-en-census.trendmicro.com
  • ds200-en.fbs25.trendmicro.com
  • ds200-jp.fbs25.trendmicro.com
  • dsaas.icrc.trendmicro.com
  • dsaas-en-f.trx.trendmicro.com
  • dsaas-en-b.trx.trendmicro.com
  • deepsecaas11-en.gfrbridge.trendmicro.com
  • dsaas.url.trendmicro.com
  • Germany
In addition to the "All regions" exceptions:
  • workload.de-1.cloudone.trendmicro.com
  • agents.workload.de-1.cloudone.trendmicro.com
  • <agents-001 through agents-010>.workload.de-1.cloudone.trendmicro.com
  • agent-comm.workload.de-1.cloudone.trendmicro.com
  • dsmim.workload.de-1.cloudone.trendmicro.com
  • relay.workload.de-1.cloudone.trendmicro.com
  • xdr-resp-ioc.workload.de-1.cloudone.trendmicro.com
  • gateway.workload.de-1.cloudone.trendmicro.com
  • gateway-control.workload.de-1.cloudone.trendmicro.com
  • UK
In addition to the "All regions" exceptions:
  • workload.gb-1.cloudone.trendmicro.com
  • agents.workload.gb-1.cloudone.trendmicro.com
  • <agents-001 through agents-010>.workload.gb-1.cloudone.trendmicro.com
  • agent-comm.workload.gb-1.cloudone.trendmicro.com
  • dsmim.workload.gb-1.cloudone.trendmicro.com
  • relay.workload.gb-1.cloudone.trendmicro.com
  • xdr-resp-ioc.workload.gb-1.cloudone.trendmicro.com
  • gateway.workload.gb-1.cloudone.trendmicro.com
  • gateway-control.workload.gb-1.cloudone.trendmicro.com
Zero Trust Secure Access Exceptions
Important
Important
You must also specify the exceptions for the Endpoint Sensor Agents. These exceptions are found at Endpoint Sensor Agents.
Service
Region
Exceptions
Access Module
  • All
  • prod.ztsaagent.trendmicro.com
  • upload.eu.xdr.trendmicro.com
  • event-eu.ztsaagent.trendmicro.com
Authentication
  • All
  • agent-eu-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • All
  • auth.ztsa-iag.trendmicro.com
  • pac.eu.ztsa-iag.trendmicro.com
  • auth.eu.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All
  • proxy.ztsa-iag.trendmicro.com
  • Europe
  • proxy.eu.ztsa-iag.trendmicro.com
  • UK
  • proxy-uk.eu.ztsa-iag.trendmicro.com
  • France
  • proxy-fr.eu.ztsa-iag.trendmicro.com
  • Italy
  • proxy-it.eu.ztsa-iag.trendmicro.com
  • South Africa
  • proxy-sa.eu.ztsa-iag.trendmicro.com
  • Middle East
  • proxy-me.eu.ztsa-iag.trendmicro.com
  • Israel
  • proxy-il.eu.ztsa-iag.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network: Off
  • All
  • xlogr-ec1.xdr.trendmicro.com
  • api.eu-central-1.eu.ddcloud.trendmicro.com
  • iwsh30-en.url.trendmicro.com
  • api-eu-central-1.crs.trendmicro.com
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network: On
  • All
  • xlogr-ec1.xdr.trendmicro.com
  • api.eu-central-1.eu.ddcloud.trendmicro.com
  • ctapi.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Private Access Connector
  • All
  • agent-eu-rel.ztna.trendmicro.com
  • saseztnaprodeusagen2.blob.core.windows.net
  • saseztnaprodeusa.blob.core.windows.net
  • sase-ztna-prod-eu-iothub-cntevt.azure-devices.net
  • speedtest.eu.ztna.trendmicro.com
  • ztnaextacr.azurecr.io
  • 0.pool.ntp.org
  • 1.pool.ntp.org
  • 2.pool.ntp.org
  • 3.pool.ntp.org
Private Access Connector
(if not using the Trend Cloud Proxy service)
Australia
  • 20.5.69.128/28
Europe
  • 20.4.51.32/28
India
  • 20.219.254.160/28
Israel
  • 20.217.194.0/28
Japan
  • 52.140.246.128/28
Singapore
  • 52.187.118.64/28
United States
  • 20.7.52.240/28
Brazil
  • 4.228.193.144/28

Service Gateway Exceptions

Service
Region
Exceptions
Firmware
  • All
  • sgi-tunneling.eu.xdr.trendmicro.com
  • sgi-iot.eu.xdr.trendmicro.com
  • api.eu.xdr.trendmicro.com
  • upload.eu.xdr.trendmicro.com
Smart Protection Network proxy: On
  • All
  • ctapi.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • activeupdate.trendmicro.com
Smart Protection Network proxy: Off
  • All
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
  • grid-global.trendmicro.com
  • rest.mars.trendmicro.com
  • sg-tmsps10-en.gfrbridge.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • sg-tmsps10-en-backup.url.trendmicro.com
  • activeupdate.trendmicro.com
Local ActiveUpdate
  • All
Refer to ActiveUpdate session of each product/agent

Trend Vision One Container Security

Service
Region
Exceptions
Artifact Scanner
  • All
  • upload.artifactscan.de-1.cloudone.trendmicro.com
  • report.artifactscan.de-1.cloudone.trendmicro.com
  • artifactscan.de-1.cloudone.trendmicro.com
  • cli.artifactscan.cloudone.trendmicro.com
Runtime Security
  • All
  • container.de-1.cloudone.trendmicro.com
  • iot.container.de-1.cloudone.trendmicro.com
  • vcs-iot-eu.xdr.trendmicro.com
  • vcs-storage-eu.xdr.trendmicro.com
    Note
    Note
    vcs-storage-eu.xdr.trendmicro.com
    is used by two services: Runtime Security and Inventory.
Anti-malware Scanner
  • All
  • antimalware.de-1.cloudone.trendmicro.com
Inventory
  • All
  • container.de-1.cloudone.trendmicro.com
  • vcs-storage-eu.xdr.trendmicro.com
    Note
    Note
    vcs-storage-eu.xdr.trendmicro.com
    is used by two services: Runtime Security and Inventory.
Telemetry Collection
  • All
  • telemetry.deepsecurity.trendmicro.com
Default Container Image Access
  • All
  • public.ecr.aws

Intrusion Prevention Configuration Exceptions

Service
Region
Exceptions
Intrusion Prevention Configuration
Australia
  • a1mmnfkx71i3sj-ats.iot.ap-southeast-2.amazonaws.com
Europe
  • a1mmnfkx71i3sj-ats.iot.eu-central-1.amazonaws.com
India
  • a1mmnfkx71i3sj-ats.iot.ap-south-1.amazonaws.com
Japan
  • a1mmnfkx71i3sj-ats.iot.ap-northeast-1.amazonaws.com
Singapore
  • a1mmnfkx71i3sj-ats.iot.ap-southeast-1.amazonaws.com
United States
  • a1mmnfkx71i3sj-ats.iot.us-east-1.amazonaws.com

Network Inventory

Service
Region
Exceptions
Virtual Network Sensor
Europe
  • xns-p.activeupdate.trendmicro.com
  • api.eu.xdr.nacloud.trendmicro.com
  • xns-en.fbs25.trendmicro.com
  • xlogr-ec1.xdr.trendmicro.com
  • api-ni-eu.xdr.trendmicro.com
  • licenseupdate.trendmicro.com
For customers with "Send to Sandbox" enabled:
  • grid-global.trendmicro.com
  • api.ddcloud.trendmicro.com
  • api.in.ddcloud.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: On
Europe
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.com
  • portal-02.dddxdr.trendmicro.com
  • xlogr-ue1.xdr.trendmicro.com
  • api.us.xdr.nacloud.trendmicro.com
  • api.en.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi67-p.activeupdate.trendmicro.com/activeupdate
  • ddi6-7-en-t0.url.trendmicro.com
  • ddi67-en-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi67.retroscan.trendmicro.com
  • gp.fbs.trendmicro.com
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: Off
Europe
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.com
  • portal-02.dddxdr.trendmicro.com
  • xlogr-ue1.xdr.trendmicro.com
  • api.us.xdr.nacloud.trendmicro.com
  • api.en.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi67-p.activeupdate.trendmicro.com/activeupdate
  • ddi6-7-en-t0.url.trendmicro.com
  • ddi67-en-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi67.retroscan.trendmicro.com
  • gp.fbs.trendmicro.com
  • ddi6-7-en.url.trendmicro.com
  • ddi6-7-en-wis.trendmicro.com
  • ddi670-en-census.trendmicro.com
  • ddi670-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: On
Europe
  • api-ni.xdr.trendmicro.com
    portal-01.dddxdr.trendmicro.com
    portal-02.dddxdr.trendmicro.com
    xlogr-ue1.xdr.trendmicro.com
    api.us.xdr.nacloud.trendmicro.com
    api.en.ddcloud.trendmicro.com
    grid-global.trendmicro.com
    licenseupdate.trendmicro.com
    rest.mars.trendmicro.com
    ddaaas.trendmicro.com
    ddi66-p.activeupdate.trendmicro.com/activeupdate
    ddi65-p.activeupdate.trendmicro.com/activeupdate
    ddi62-p.activeupdate.trendmicro.com/activeupdate
    ddi60-p.activeupdate.trendmicro.com/activeupdate
    ddi58-p.activeupdate.trendmicro.com/activeupdate
    ddi57-p.activeupdate.trendmicro.com/activeupdate
    ddi6-6-en-t0.url.trendmicro.com
    ddi6-5-en-t0.url.trendmicro.com
    ddi6-2-en-t0.url.trendmicro.com
    ddi6-0-en-t0.url.trendmicro.com
    ddi5-8-en-t0.url.trendmicro.com
    ddi5-7-en-t0.url.trendmicro.com
    ddi66-en-f.trx.trendmicro.com
    ddi65-en-f.trx.trendmicro.com
    ddi62-en-f.trx.trendmicro.com
    ddi60-en-f.trx.trendmicro.com
    ddi58-en-f.trx.trendmicro.com
    ddi57-en-f.trx.trendmicro.com
    intelliconnect.trendmicro.com
    ddi66.retroscan.trendmicro.com
    ddi65-retroscan.trendmicro.com
    ddi62-retroscan.trendmicro.com
    ddi60-retroscan.trendmicro.com
    ddi58-retroscan.trendmicro.com
    ddi57-retroscan.trendmicro.com
    ddi660-en.fbs25.trendmicro.com
    ddi650-en.fbs25.trendmicro.com
    ddi620-en.fbs25.trendmicro.com
    ddi600-en.fbs25.trendmicro.com
    ddi580-en.fbs25.trendmicro.com
    ddi570-en.fbs25.trendmicro.com
    sg-tmsps10-en.url.trendmicro.com
    sg-tmsps10-en-wis.trendmicro.com
    sg-tmsps100-en-census.trendmicro.com
    sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: Off
Europe
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.com
  • portal-02.dddxdr.trendmicro.com
  • xlogr-ue1.xdr.trendmicro.com
  • api.us.xdr.nacloud.trendmicro.com
  • api.en.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi66-p.activeupdate.trendmicro.com/activeupdate
  • ddi65-p.activeupdate.trendmicro.com/activeupdate
  • ddi62-p.activeupdate.trendmicro.com/activeupdate
  • ddi60-p.activeupdate.trendmicro.com/activeupdate
  • ddi58-p.activeupdate.trendmicro.com/activeupdate
  • ddi57-p.activeupdate.trendmicro.com/activeupdate
  • ddi660-en-domaincensus.trendmicro.com
  • ddi650-en-domaincensus.trendmicro.com
  • ddi620-en-domaincensus.trendmicro.com
  • ddi600-en-domaincensus.trendmicro.com
  • ddi580-en-domaincensus.trendmicro.com
  • ddi570-en-domaincensus.trendmicro.com
  • ddi660-en-census.trendmicro.com
  • ddi650-en-census.trendmicro.com
  • ddi620-en-census.trendmicro.com
  • ddi600-en-census.trendmicro.com
  • ddi580-en-census.trendmicro.com
  • ddi570-en-census.trendmicro.com
  • ddi6-6-en-t0.url.trendmicro.com
  • ddi6-5-en-t0.url.trendmicro.com
  • ddi6-2-en-t0.url.trendmicro.com
  • ddi6-0-en-t0.url.trendmicro.com
  • ddi5-8-en-t0.url.trendmicro.com
  • ddi5-7-en-t0.url.trendmicro.com
  • ddi66-en-f.trx.trendmicro.com
  • ddi65-en-f.trx.trendmicro.com
  • ddi62-en-f.trx.trendmicro.com
  • ddi60-en-f.trx.trendmicro.com
  • ddi58-en-f.trx.trendmicro.com
  • ddi57-en-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi66.retroscan.trendmicro.com
  • ddi65-retroscan.trendmicro.com
  • ddi62-retroscan.trendmicro.com
  • ddi60-retroscan.trendmicro.com
  • ddi58-retroscan.trendmicro.com
  • ddi57-retroscan.trendmicro.com
  • ddi660-en.fbs25.trendmicro.com
  • ddi650-en.fbs25.trendmicro.com
  • ddi620-en.fbs25.trendmicro.com
  • ddi600-en.fbs25.trendmicro.com
  • ddi580-en.fbs25.trendmicro.com
  • ddi570-en.fbs25.trendmicro.com
  • ddi6-6-en-wis.trendmicro.com
  • ddi6-5-en-wis.trendmicro.com
  • ddi6-2-en-wis.trendmicro.com
  • ddi6-0-en-wis.trendmicro.com
  • ddi5-8-en-wis.trendmicro.com
  • ddi5-7-en-wis.trendmicro.com
  • ddi6-6-en.url.trendmicro.com
  • ddi6-5-en.url.trendmicro.com
  • ddi6-2-en.url.trendmicro.com
  • ddi6-0-en.url.trendmicro.com
  • ddi5-8-en.url.trendmicro.com
  • ddi5-7-en.url.trendmicro.com

Trend Vision One Agentless Vulnerability & Threat Detection Exceptions

Service
Region
Exceptions
Agentless Vulnerability and Threat Detection
Europe
  • sentry.de-1.cloudone.trendmicro.com
  • xlogr-ec1.xdr.trendmicro.com