Views:
The following firewall exceptions apply to networks with:

Trend Vision One Authentication

Service
Region
Exceptions
Trend Vision One
  • All
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • All
  • assessment-ap2.mgcp.trendmicro.com
  • release-us1.mgcp.trendmicro.com
  • api-ap2.xbc.trendmicro.com
  • tgw-ap2.mgcp.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.manage.trendmicro.com
  • cloudendpoint-ap2.mgcp.trendmicro.com
  • er-ws-ane1.xdr.trendmicro.com
  • era-ane1.xdr.trendmicro.com
  • endpointpolicy-cdn-ap2.xbc.trendmicro.com
  • files.trendmicro.com
  • xlogr-ane1.xdr.trendmicro.com
  • api.xdr.trendmicro.co.jp
  • api-cert.xdr.trendmicro.co.jp
  • upload.xdr.trendmicro.co.jp
  • wsc-ap2.xbc.trendmicro.com
Endpoint Sensor Agents with Sandbox Analysis
  • All
  • sandbox-threatconnect.trendmicro.com
Standard Endpoint Protection Agents
Important
Important
If you enable endpoint sensor detection and response, you must also add the Endpoint Sensor Agents exceptions.
  • All
  • <Apex One console_DNS>.manage.trendmicro.com
    (refer to license email)
  • licenseupdate.trendmicro.com
  • asm01-nabu-prod.aot.trendmicro.com
  • api-nabu.aot.trendmicro.com
  • osce14-p.activeupdate.trendmicro.co.jp
  • tmsm35-p.activeupdate.trendmicro.co.jp
  • activeupdate.trendmicro.co.jp
  • osce14-jp.icrc.trendmicro.com
  • osce14-0-jp.url.trendmicro.com
  • osce140-jp.fbs25.trendmicro.com
  • osce14-jp.gfrbridge.trendmicro.com
  • osce14-jp-census.trendmicro.com
  • osce14bak-jp-census.trendmicro.com
  • osce140-jp-f.trx.trendmicro.com
  • oscecmp140-jp-f.trx.trendmicro.com
  • osce140-jp-b.trx.trendmicro.com
  • mcs.trendmicro.com
  • www.trendmicro.com/vinfo/jp/threat-encyclopedia/malware/
  • files.trendmicro.com
Server & Workload Protection Agents
Important
Important
If you enable endpoint sensor detection and response, you must also add the Endpoint Sensor Agents exceptions.
  • All regions
  • workload.jp-1.cloudone.trendmicro.com
  • agents.workload.jp-1.cloudone.trendmicro.com
  • <agents-001 through agents-010>.workload.jp-1.cloudone.trendmicro.com
  • agent-comm.workload.jp-1.cloudone.trendmicro.com
  • dsmim.workload.jp-1.cloudone.trendmicro.com
  • relay.workload.jp-1.cloudone.trendmicro.com
  • xdr-resp-ioc.workload.jp-1.cloudone.trendmicro.com
  • files.trendmicro.com
  • iaus.activeupdate.trendmicro.com
  • iaus.trendmicro.com
  • ipv6-iaus.trendmicro.com
  • ipv6-iaus.activeupdate.trendmicro.com
  • dsaas1100-en-census.trendmicro.com
  • ds200-en.fbs25.trendmicro.com
  • ds200-jp.fbs25.trendmicro.com
  • dsaas.icrc.trendmicro.com
  • dsaas-en-f.trx.trendmicro.com
  • dsaas-en-b.trx.trendmicro.com
  • deepsecaas11-en.gfrbridge.trendmicro.com
  • dsaas.url.trendmicro.com
  • gateway.workload.jp-1.cloudone.trendmicro.com
  • gateway-control.workload.jp-1.cloudone.trendmicro.com

Zero Trust Secure Access Exceptions

Service
Region
Exceptions
Access Module
  • All
  • prod.ztsaagent.trendmicro.com
  • upload.xdr.trendmicro.co.jp
  • event-jp.ztsaagent.trendmicro.com
Authentication
  • All
  • agent-jp-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • All
  • auth.ztsa-iag.trendmicro.com
  • pac.jp.ztsa-iag.trendmicro.com
  • auth.jp.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All
  • proxy.ztsa-iag.trendmicro.com
  • proxy.jp.ztsa-iag.trendmicro.com
Internet Access On-Premises Gateway
  • All
  • xlogr-ane1.xdr.trendmicro.com
  • api.ap-northeast-1.jp.ddcloud.trendmicro.com
  • iwsh30-en.url.trendmicro.com
  • api.crs.trendmicro.com
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
Private Access Connector
  • All
  • agent-jp-rel.ztna.trendmicro.com
  • saseztnaprodjpsagen2.blob.core.windows.net
  • saseztnaprodjpsa.blob.core.windows.net
  • sase-ztna-prod-jp-iothub-cntevt.azure-devices.net
  • speedtest.jp.ztna.trendmicro.com
  • ztnaextacr.azurecr.io
  • 0.pool.ntp.org
  • 1.pool.ntp.org
  • 2.pool.ntp.org
  • 3.pool.ntp.org
Private Access Connector
(if not using the Trend Cloud Proxy service)
Australia
  • 20.5.69.128/28
Europe
  • 20.4.51.32/28
India
  • 20.219.254.160/28
Israel
  • 20.217.194.0/28
Japan
  • 52.140.246.128/28
Singapore
  • 52.187.118.64/28
United States
  • 20.7.52.240/28
Brazil
  • 4.228.193.144/28

Service Gateway Exceptions

Service
Region
Exceptions
Firmware
  • All
  • sgi-tunneling.jp.xdr.trendmicro.co.jp
  • sgi-iot.xdr.trendmicro.co.jp
  • api.xdr.trendmicro.co.jp
  • upload.xdr.trendmicro.co.jp
Smart Protection Network proxy: On
  • All
  • ctapi.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • activeupdate.trendmicro.com
Smart Protection Network proxy: Off
  • All
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
  • grid-global.trendmicro.com
  • rest.mars.trendmicro.com
  • sg-tmsps10-en.gfrbridge.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
  • sg-tmsps10-en-backup.url.trendmicro.com
  • activeupdate.trendmicro.com
Local ActiveUpdate
  • All
Refer to ActiveUpdate session of each product/agent

Trend Vision One Container Security

Service
Region
Exceptions
Artifact Scanner
  • All
  • artifactscan.jp-1.cloudone.trendmicro.com
  • asaas-scan-upload-ap-northeast-1-prod.s3.ap-northeast-1.amazonaws.com
  • asaas-scan-vuln-ap-northeast-1-prod.s3.ap-northeast-1.amazonaws.com
  • cli.artifactscan.cloudone.trendmicro.com
Runtime Security
  • All
  • sensor-components-prod-componentsstoragebucket-a1g8t8ve13ql.s3.amazonaws.com
  • container.jp-1.cloudone.trendmicro.com
  • iot.container.jp-1.cloudone.trendmicro.com
  • vcs-iot-jp.xdr.trendmicro.com
  • sensor-components-producti-componentsstoragebucket-ma6hvtp1bl6s.s3.amazonaws.com
  • rules-production-rulesstoragebucket-k5lyjpga5bkz.s3.amazonaws.com
  • rules-prod-rulesstoragebucket-1modjr40my93k.s3.ap-northeast-1.amazonaws.com
Anti-malware Scanner
  • All
  • antimalware.jp-1.cloudone.trendmicro.com
Inventory
  • All
  • cs-inventory-landing-ap-northeast-1-275357989408.s3.us-east-1.amazonaws.com
  • container.jp-1.cloudone.trendmicro.com
  • v1cs-inventory-landing-ap-northeast-1-484917860638.s3.ap-northeast-1.amazonaws.com
Telemetry Collection
  • All
  • telemetry.deepsecurity.trendmicro.com
AWS ECS Task Definition Patcher
  • All
  • raw.githubusercontent.com
Default Container Image Access
  • All
  • public.ecr.aws

Intrusion Prevention Configuration Exceptions

Service
Region
Exceptions
Intrusion Prevention Configuration
Australia
  • a1mmnfkx71i3sj-ats.iot.ap-southeast-2.amazonaws.com
Europe
  • a1mmnfkx71i3sj-ats.iot.eu-central-1.amazonaws.com
India
  • a1mmnfkx71i3sj-ats.iot.ap-south-1.amazonaws.com
Japan
  • a1mmnfkx71i3sj-ats.iot.ap-northeast-1.amazonaws.com
Singapore
  • a1mmnfkx71i3sj-ats.iot.ap-southeast-1.amazonaws.com
United States
  • a1mmnfkx71i3sj-ats.iot.us-east-1.amazonaws.com

Network Inventory

Service
Region
Exceptions
Virtual Network Sensor
Japan
  • xns-p.activeupdate.trendmicro.com
  • api.jp.xdr.nacloud.trendmicro.com
  • xns-en.fbs25.trendmicro.com
  • xlogr-ane1.xdr.trendmicro.com
  • api-ni.xdr.trendmicro.com.jp
  • licenseupdate.trendmicro.com
  • api.ddcloud.trendmicro.com
  • api.jp.ddcloud.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: On
Japan
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.co.jp
  • xlogr-ane1.xdr.trendmicro.com
  • api.jp.xdr.nacloud.trendmicro.com
  • api.jp.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi67-p.activeupdate.trendmicro.com/activeupdate/japan
  • ddi6-7-jp-t0.url.trendmicro.com
  • ddi67-jp-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi67.retroscan.trendmicro.com
  • gp.fbs.trendmicro.com
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: Off
Japan
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.co.jp
  • xlogr-ane1.xdr.trendmicro.com
  • api.jp.xdr.nacloud.trendmicro.com
  • api.jp.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi67-p.activeupdate.trendmicro.com/activeupdate/japan
  • ddi6-7-jp-t0.url.trendmicro.com
  • ddi67-jp-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi67.retroscan.trendmicro.com
  • gp.fbs.trendmicro.com
  • ddi6-7-jp.url.trendmicro.com
  • ddi6-7-jp-wis.trendmicro.com
  • ddi670-jp-census.trendmicro.com
  • ddi670-jp-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: On
Japan
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.co.jp
  • xlogr-ane1.xdr.trendmicro.com
  • api.jp.xdr.nacloud.trendmicro.com
  • api.jp.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi66-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi65-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi62-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi60-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi58-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi57-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi6-6-jp-t0.url.trendmicro.com
  • ddi6-5-jp-t0.url.trendmicro.com
  • ddi6-2-jp-t0.url.trendmicro.com
  • ddi6-0-jp-t0.url.trendmicro.com
  • ddi5-8-jp-t0.url.trendmicro.com
  • ddi5-7-jp-t0.url.trendmicro.com
  • ddi66-jp-f.trx.trendmicro.com
  • ddi65-jp-f.trx.trendmicro.com
  • ddi62-jp-f.trx.trendmicro.com
  • ddi60-jp-f.trx.trendmicro.com
  • ddi58-jp-f.trx.trendmicro.com
  • ddi57-jp-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi66jp.retroscan.trendmicro.com
  • ddi65jp-retroscan.trendmicro.com
  • ddi62jp-retroscan.trendmicro.com
  • ddi60jp-retroscan.trendmicro.com
  • ddi58jp-retroscan.trendmicro.com
  • ddi57jp-retroscan.trendmicro.com
  • ddi660-jp.fbs25.trendmicro.com
  • ddi650-jp.fbs25.trendmicro.com
  • ddi620-jp.fbs25.trendmicro.com
  • ddi600-jp.fbs25.trendmicro.com
  • ddi580-jp.fbs25.trendmicro.com
  • ddi570-jp.fbs25.trendmicro.com
  • ddi660-en.fbs25.trendmicro.com
  • ddi650-en.fbs25.trendmicro.com
  • ddi620-en.fbs25.trendmicro.com
  • ddi600-en.fbs25.trendmicro.com
  • ddi580-en.fbs25.trendmicro.com
  • ddi570-en.fbs25.trendmicro.com
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: Off
Japan
  • api-ni.xdr.trendmicro.com
  • portal-01.dddxdr.trendmicro.co.jp
  • xlogr-ane1.xdr.trendmicro.com
  • api.jp.xdr.nacloud.trendmicro.com
  • api.jp.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi66-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi65-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi62-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi60-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi58-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi57-p.activeupdate.trendmicro.co.jp/activeupdate/japan
  • ddi660-jp-domaincensus.trendmicro.com
  • ddi650-jp-domaincensus.trendmicro.com
  • ddi620-jp-domaincensus.trendmicro.com
  • ddi600-jp-domaincensus.trendmicro.com
  • ddi580-jp-domaincensus.trendmicro.com
  • ddi570-jp-domaincensus.trendmicro.com
  • ddi660-jp-census.trendmicro.com
  • ddi650-jp-census.trendmicro.com
  • ddi620-jp-census.trendmicro.com
  • ddi600-jp-census.trendmicro.com
  • ddi580-jp-census.trendmicro.com
  • ddi570-jp-census.trendmicro.com
  • ddi6-6-jp-t0.url.trendmicro.com
  • ddi6-5-jp-t0.url.trendmicro.com
  • ddi6-2-jp-t0.url.trendmicro.com
  • ddi6-0-jp-t0.url.trendmicro.com
  • ddi5-8-jp-t0.url.trendmicro.com
  • ddi5-7-jp-t0.url.trendmicro.com
  • ddi66-jp-f.trx.trendmicro.com
  • ddi65-jp-f.trx.trendmicro.com
  • ddi62-jp-f.trx.trendmicro.com
  • ddi60-jp-f.trx.trendmicro.com
  • ddi58-jp-f.trx.trendmicro.com
  • ddi57-jp-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi66jp.retroscan.trendmicro.com
  • ddi65jp-retroscan.trendmicro.com
  • ddi62jp-retroscan.trendmicro.com
  • ddi60jp-retroscan.trendmicro.com
  • ddi58jp-retroscan.trendmicro.com
  • ddi57jp-retroscan.trendmicro.com
  • ddi660-jp.fbs25.trendmicro.com
  • ddi650-jp.fbs25.trendmicro.com
  • ddi620-jp.fbs25.trendmicro.com
  • ddi600-jp.fbs25.trendmicro.com
  • ddi580-jp.fbs25.trendmicro.com
  • ddi570-jp.fbs25.trendmicro.com
  • ddi660-en.fbs25.trendmicro.com
  • ddi650-en.fbs25.trendmicro.com
  • ddi620-en.fbs25.trendmicro.com
  • ddi600-en.fbs25.trendmicro.com
  • ddi580-en.fbs25.trendmicro.com
  • ddi570-en.fbs25.trendmicro.com
  • ddi6-6-jp-wis.trendmicro.com
  • ddi6-5-jp-wis.trendmicro.com
  • ddi6-2-jp-wis.trendmicro.com
  • ddi6-0-jp-wis.trendmicro.com
  • ddi5-8-jp-wis.trendmicro.com
  • ddi5-7-jp-wis.trendmicro.com
  • ddi6-6-jp.url.trendmicro.com
  • ddi6-5-jp.url.trendmicro.com
  • ddi6-2-jp.url.trendmicro.com
  • ddi6-0-jp.url.trendmicro.com
  • ddi5-8-jp.url.trendmicro.com
  • ddi5-7-jp.url.trendmicro.com