Views:
The following firewall exceptions apply to networks with a Service Gateway installed and cloud service extension turned on.
Important
Important
The cloud service extension reduces firewall exceptions but causes network latency.

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • All
  • xlogr-ec1.xdr.trendmicro.com

Zero Trust Secure Access Exceptions

Service
Region
Exceptions
Authentication
  • All
  • agent-eu-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • All
  • auth.ztsa-iag.trendmicro.com
  • pac.eu.ztsa-iag.trendmicro.com
  • auth.eu.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All regions
  • proxy.ztsa-iag.trendmicro.com
  • proxy.eu.ztsa-iag.trendmicro.com
UK
  • proxy-uk.eu.ztsa-iag.trendmicro.com
France
  • proxy-fr.eu.ztsa-iag.trendmicro.com
Italy
  • proxy-it.eu.ztsa-iag.trendmicro.com
South Africa
  • proxy-sa.eu.ztsa-iag.trendmicro.com
Middle East
  • proxy-me.eu.ztsa-iag.trendmicro.com
Israel
  • proxy-il.eu.ztsa-iag.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network: Off
  • All
  • xlogr-ec1.xdr.trendmicro.com
  • api.eu-central-1.eu.ddcloud.trendmicro.com
  • iwsh30-en.url.trendmicro.com
  • api-eu-central-1.crs.trendmicro.com
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network: On
  • All
  • xlogr-ec1.xdr.trendmicro.com
  • api.eu-central-1.eu.ddcloud.trendmicro.com
  • ctapi.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Private Access Connector
Australia
  • 20.5.69.128/28
Europe
  • 20.4.51.32/28
India
  • 20.219.254.160/28
Japan
  • 52.140.246.128/28
Singapore
  • 52.187.118.64/28
United States
  • 20.7.52.240/28
Brazil
  • 4.228.193.144/28

Service Gateway Exceptions

Service
Region
Exceptions
Firmware
  • All
  • sgi-iot.eu.xdr.trendmicro.com
  • api.eu.xdr.trendmicro.com
  • eu.services.trendmicro.com
Smart Protection Network proxy: On
  • All
  • ctapi.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • activeupdate.trendmicro.com
Smart Protection Network proxy: Off
  • All
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
  • grid-global.trendmicro.com
  • rest.mars.trendmicro.com
  • sg-tmsps10-en.gfrbridge.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • sg-tmsps10-en-backup.url.trendmicro.com
  • activeupdate.trendmicro.com
Local ActiveUpdate
  • All
Refer to ActiveUpdate session of each product/agent

Network Inventory

Service
Region
Exceptions
Virtual Network Sensor
Europe
  • xns-p.activeupdate.trendmicro.com
  • api.eu.xdr.nacloud.trendmicro.com
  • xns-en.fbs25.trendmicro.com
  • xlogr-ec1.xdr.trendmicro.com
  • api-ni-eu.xdr.trendmicro.com
  • licenseupdate.trendmicro.com
  • api.ddcloud.trendmicro.com
  • api.eu.ddcloud.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: On
Europe
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: Off
Europe
Refer to Service Gateway Exceptions
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: On
Europe
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: Off
Europe
Refer to Service Gateway Exceptions