Firewall exceptions: Singapore - all exceptions

Trend Vision One Authentication

Service	Region	Exceptions
Trend Vision One	All	signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA: www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net

Service

Region

Exceptions

Trend Vision One

All

signin.v1.trendmicro.com
tm.login.trendmicro.com
iamservice.trendmicro.com
Other custom IDP services

Google reCAPTCHA:

www.gstatic.com
fonts.gstatic.com
Plus one of the following:
- www.google.com (recommended)
- www.recaptcha.net

Endpoint Security Exceptions

Service / Agent

Region

Exceptions

Endpoint Sensor Agents

Singapore

assessment-ap3.mgcp.trendmicro.com
release-us1.mgcp.trendmicro.com
api-ap3.xbc.trendmicro.com
cdn-api-ap3.xbc.trendmicro.com
a1bz7u2flvp09t-ats.iot.ap-southeast-1.amazonaws.com
tgw-ap3.mgcp.trendmicro.com
release-us1.mgcp.trendmicro.com
support-connector-api.manage.trendmicro.com
supportconnectorpacks.manage.trendmicro.com
rpcollectedthings.manage.trendmicro.com
cloudendpoint-ap3.mgcp.trendmicro.com
er-ws-ase1.xdr.trendmicro.com
era-ase1.xdr.trendmicro.com
endpointpolicy-cdn-ap3.xbc.trendmicro.com
cloudendpoint-ap3.mgcp.trendmicro.com
files.trendmicro.com
xlogr-ase1.xdr.trendmicro.com
api.sg.xdr.trendmicro.com
api-cert.sg.xdr.trendmicro.com
upload.sg.xdr.trendmicro.com

Endpoint Sensor Agents with Sandbox Analysis

All

sandbox-threatconnect.trendmicro.com

Standard Endpoint Protection Agents

Important

If you enable endpoint sensor detection and response, you must also add the Endpoint Sensor Agents exceptions.

All

<Apex One console_DNS>.manage.trendmicro.com

(refer to license email)
licenseupdate.trendmicro.com
asm01-nabu-prod.aot.trendmicro.com
api-nabu.aot.trendmicro.com
osce14-p.activeupdate.trendmicro.com
tmsm35-p.activeupdate.trendmicro.com
activeupdate.trendmicro.com
osce14.icrc.trendmicro.com
osce14-0-en.url.trendmicro.com
osce140-en.fbs25.trendmicro.com
osce14-en.gfrbridge.trendmicro.com
osce14-en-census.trendmicro.com
osce14bak-en-census.trendmicro.com
osce140-en-f.trx.trendmicro.com
oscecmp140-en-f.trx.trendmicro.com
osce140-en-b.trx.trendmicro.com
mcs.trendmicro.com
www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/
files.trendmicro.com

Server & Workload Protection Agents

Important

If you enable endpoint sensor detection and response, you must also add the Endpoint Sensor Agents exceptions.

All

workload.sg-1.cloudone.trendmicro.com
agents.workload.sg-1.cloudone.trendmicro.com
<agents-001 through agents-010>.workload.sg-1.cloudone.trendmicro.com
agent-comm.workload.sg-1.cloudone.trendmicro.com
dsmim.workload.sg-1.cloudone.trendmicro.com
relay.workload.sg-1.cloudone.trendmicro.com
xdr-resp-ioc.workload.sg-1.cloudone.trendmicro.com
files.trendmicro.com
iaus.activeupdate.trendmicro.com
iaus.trendmicro.com
ipv6-iaus.trendmicro.com
ipv6-iaus.activeupdate.trendmicro.com
dsaas1100-en-census.trendmicro.com
ds200-en.fbs25.trendmicro.com
ds200-jp.fbs25.trendmicro.com
dsaas.icrc.trendmicro.com
dsaas-en-f.trx.trendmicro.com
dsaas-en-b.trx.trendmicro.com
deepsecaas11-en.gfrbridge.trendmicro.com
dsaas.url.trendmicro.com
gateway.workload.sg-1.cloudone.trendmicro.com
gateway-control.workload.sg-1.cloudone.trendmicro.com

Zero Trust Secure Access Exceptions

Service	Region	Exceptions
Access Module	All	prod.ztsaagent.trendmicro.com upload.sg.xdr.trendmicro.com event-sg.ztsaagent.trendmicro.com
Authentication	All	agent-sg-rel.ztna.trendmicro.com signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA: www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net
Internet Access Service	All	auth.ztsa-iag.trendmicro.com pac.mea.ztsa-iag.trendmicro.com auth.mea.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway	All	proxy.ztsa-iag.trendmicro.com proxy.mea.ztsa-iag.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network: Off	All	xlogr-mea.xdr.trendmicro.com api.me-central-1.uae.ddcloud.trendmicro.com iwsh30-en.url.trendmicro.com api-eu-central-1.crs.trendmicro.com iwsh300-en.census.trendmicro.com iwsaas30-en-f.trx.trendmicro.com iwsh30-p.activeupdate.trendmicro.com
Internet Access On-Premises Gateway with Smart Protection Network: On	All	xlogr-mea.xdr.trendmicro.com api.me-central-1.uae.ddcloud.trendmicro.com ctapi.trendmicro.com iwsh30-p.activeupdate.trendmicro.com
Private Access Connector	All	agent-mea-rel.ztna.trendmicro.com saseztnaprodsgsagen2.blob.core.windows.net saseztnaprodsgsa.blob.core.windows.net sase-ztna-prod-sg-iothub-cntevt.azure-devices.net speedtest.sg.ztna.trendmicro.com ztnaextacr.azurecr.io 0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org
Private Access Connector (if not using the Trend Cloud Proxy service)	Australia	20.5.69.128/28
	Europe	20.4.51.32/28
	India	20.219.254.160/28
	Israel	20.217.194.0/28
	Japan	52.140.246.128/28
	Singapore	52.187.118.64/28
	United States	20.7.52.240/28
	Brazil	4.228.193.144/28

Service Gateway Exceptions

Service	Region	Exceptions
Firmware	All	sgi-tunneling.sg.xdr.trendmicro.com sgi-iot.sg.xdr.trendmicro.com api.sg.xdr.trendmicro.com upload.sg.xdr.trendmicro.com
Smart Protection Network proxy: On	All	ctapi.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com activeupdate.trendmicro.com
Smart Protection Network proxy: Off	All	sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com grid-global.trendmicro.com rest.mars.trendmicro.com sg-tmsps10-en.gfrbridge.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com sg-tmsps10-en-backup.url.trendmicro.com activeupdate.trendmicro.com
Local ActiveUpdate	All	Refer to ActiveUpdate session of each product/agent

Trend Vision One Container Security

Service	Region	Exceptions
Artifact Scanner	All	artifactscan.sg-1.cloudone.trendmicro.com asaas-scan-upload-ap-southeast-1-prod.s3.ap-southeast-1.amazonaws.com asaas-scan-vuln-ap-southeast-1-prod.s3.ap-southeast-1.amazonaws.com cli.artifactscan.cloudone.trendmicro.com
Runtime Security	All	sensor-components-prod-componentsstoragebucket-x75mv7yqzt9.s3.amazonaws.com container.sg-1.cloudone.trendmicro.com iot.container.sg-1.cloudone.trendmicro.com vcs-iot-sg.xdr.trendmicro.com sensor-components-producti-componentsstoragebucket-cnafih1u17ni.s3.amazonaws.com rules-production-rulesstoragebucket-2glwn1zmqmg2.s3.amazonaws.com rules-prod-rulesstoragebucket-adu7ysw66cme.s3.ap-southeast-1.amazonaws.com
Anti-malware Scanner	All	antimalware.sg-1.cloudone.trendmicro.com
Inventory	All	cs-inventory-landing-ap-southeast-1-275357989408.s3.us-east-1.amazonaws.com container.sg-1.cloudone.trendmicro.com v1cs-inventory-landing-ap-southeast-1-484917860638.s3.ap-southeast-1.amazonaws.com
Telemetry Collection	All	telemetry.deepsecurity.trendmicro.com
AWS ECS Task Definition Patcher	All	raw.githubusercontent.com
Default Container Image Access	All	public.ecr.aws

Intrusion Prevention Configuration Exceptions

Service	Region	Exceptions
Intrusion Prevention Configuration	Australia	a1mmnfkx71i3sj-ats.iot.ap-southeast-2.amazonaws.com
	Europe	a1mmnfkx71i3sj-ats.iot.eu-central-1.amazonaws.com
	India	a1mmnfkx71i3sj-ats.iot.ap-south-1.amazonaws.com
	Japan	a1mmnfkx71i3sj-ats.iot.ap-northeast-1.amazonaws.com
	Singapore	a1mmnfkx71i3sj-ats.iot.ap-southeast-1.amazonaws.com
	United States	a1mmnfkx71i3sj-ats.iot.us-east-1.amazonaws.com

Network Inventory

Service	Region	Exceptions
Virtual Network Sensor	Singapore	xns-p.activeupdate.trendmicro.com api.sg.xdr.nacloud.trendmicro.com xns-en.fbs25.trendmicro.com xlogr-ase1.xdr.trendmicro.com api-ni-sg.xdr.trendmicro.com licenseupdate.trendmicro.com api.ddcloud.trendmicro.com api.sg.ddcloud.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: On	Singapore	api-ni.xdr.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com xlogr-ue1.xdr.trendmicro.com api.us.xdr.nacloud.trendmicro.com api.en.ddcloud.trendmicro.com grid-global.trendmicro.com licenseupdate.trendmicro.com rest.mars.trendmicro.com ddaaas.trendmicro.com ddi67-p.activeupdate.trendmicro.com/activeupdate ddi6-7-en-t0.url.trendmicro.com ddi67-en-f.trx.trendmicro.com intelliconnect.trendmicro.com ddi67.retroscan.trendmicro.com gp.fbs.trendmicro.com sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: Off	Singapore	api-ni.xdr.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com xlogr-ue1.xdr.trendmicro.com api.us.xdr.nacloud.trendmicro.com api.en.ddcloud.trendmicro.com grid-global.trendmicro.com licenseupdate.trendmicro.com rest.mars.trendmicro.com ddaaas.trendmicro.com ddi67-p.activeupdate.trendmicro.com/activeupdate ddi6-7-en-t0.url.trendmicro.com ddi67-en-f.trx.trendmicro.com intelliconnect.trendmicro.com ddi67.retroscan.trendmicro.com gp.fbs.trendmicro.com ddi6-7-en.url.trendmicro.com ddi6-7-en-wis.trendmicro.com ddi670-en-census.trendmicro.com ddi670-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: On	Singapore	api-ni.xdr.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com xlogr-ue1.xdr.trendmicro.com api.us.xdr.nacloud.trendmicro.com api.en.ddcloud.trendmicro.com grid-global.trendmicro.com licenseupdate.trendmicro.com rest.mars.trendmicro.com ddaaas.trendmicro.com ddi66-p.activeupdate.trendmicro.com/activeupdate ddi65-p.activeupdate.trendmicro.com/activeupdate ddi62-p.activeupdate.trendmicro.com/activeupdate ddi60-p.activeupdate.trendmicro.com/activeupdate ddi58-p.activeupdate.trendmicro.com/activeupdate ddi57-p.activeupdate.trendmicro.com/activeupdate ddi6-6-en-t0.url.trendmicro.com ddi6-5-en-t0.url.trendmicro.com ddi6-2-en-t0.url.trendmicro.com ddi6-0-en-t0.url.trendmicro.com ddi5-8-en-t0.url.trendmicro.com ddi5-7-en-t0.url.trendmicro.com ddi66-en-f.trx.trendmicro.com ddi65-en-f.trx.trendmicro.com ddi62-en-f.trx.trendmicro.com ddi60-en-f.trx.trendmicro.com ddi58-en-f.trx.trendmicro.com ddi57-en-f.trx.trendmicro.com intelliconnect.trendmicro.com ddi66.retroscan.trendmicro.com ddi65-retroscan.trendmicro.com ddi62-retroscan.trendmicro.com ddi60-retroscan.trendmicro.com ddi58-retroscan.trendmicro.com ddi57-retroscan.trendmicro.com ddi660-en.fbs25.trendmicro.com ddi650-en.fbs25.trendmicro.com ddi620-en.fbs25.trendmicro.com ddi600-en.fbs25.trendmicro.com ddi580-en.fbs25.trendmicro.com ddi570-en.fbs25.trendmicro.com sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: Off	Singapore	api-ni.xdr.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com xlogr-ue1.xdr.trendmicro.com api.us.xdr.nacloud.trendmicro.com api.en.ddcloud.trendmicro.com grid-global.trendmicro.com licenseupdate.trendmicro.com rest.mars.trendmicro.com ddaaas.trendmicro.com ddi66-p.activeupdate.trendmicro.com/activeupdate ddi65-p.activeupdate.trendmicro.com/activeupdate ddi62-p.activeupdate.trendmicro.com/activeupdate ddi60-p.activeupdate.trendmicro.com/activeupdate ddi58-p.activeupdate.trendmicro.com/activeupdate ddi57-p.activeupdate.trendmicro.com/activeupdate ddi660-en-domaincensus.trendmicro.com ddi650-en-domaincensus.trendmicro.com ddi620-en-domaincensus.trendmicro.com ddi600-en-domaincensus.trendmicro.com ddi580-en-domaincensus.trendmicro.com ddi570-en-domaincensus.trendmicro.com ddi660-en-census.trendmicro.com ddi650-en-census.trendmicro.com ddi620-en-census.trendmicro.com ddi600-en-census.trendmicro.com ddi580-en-census.trendmicro.com ddi570-en-census.trendmicro.com ddi6-6-en-t0.url.trendmicro.com ddi6-5-en-t0.url.trendmicro.com ddi6-2-en-t0.url.trendmicro.com ddi6-0-en-t0.url.trendmicro.com ddi5-8-en-t0.url.trendmicro.com ddi5-7-en-t0.url.trendmicro.com ddi66-en-f.trx.trendmicro.com ddi65-en-f.trx.trendmicro.com ddi62-en-f.trx.trendmicro.com ddi60-en-f.trx.trendmicro.com ddi58-en-f.trx.trendmicro.com ddi57-en-f.trx.trendmicro.com intelliconnect.trendmicro.com ddi66.retroscan.trendmicro.com ddi65-retroscan.trendmicro.com ddi62-retroscan.trendmicro.com ddi60-retroscan.trendmicro.com ddi58-retroscan.trendmicro.com ddi57-retroscan.trendmicro.com ddi660-en.fbs25.trendmicro.com ddi650-en.fbs25.trendmicro.com ddi620-en.fbs25.trendmicro.com ddi600-en.fbs25.trendmicro.com ddi580-en.fbs25.trendmicro.com ddi570-en.fbs25.trendmicro.com ddi6-6-en-wis.trendmicro.com ddi6-5-en-wis.trendmicro.com ddi6-2-en-wis.trendmicro.com ddi6-0-en-wis.trendmicro.com ddi5-8-en-wis.trendmicro.com ddi5-7-en-wis.trendmicro.com ddi6-6-en.url.trendmicro.com ddi6-5-en.url.trendmicro.com ddi6-2-en.url.trendmicro.com ddi6-0-en.url.trendmicro.com ddi5-8-en.url.trendmicro.com ddi5-7-en.url.trendmicro.com