Views:
The following firewall exceptions apply to networks with a Service Gateway installed and cloud service extension turned on.
Important
Important
The cloud service extension reduces firewall exceptions but causes network latency.

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • All
  • xlogr-ase2.xdr.trendmicro.com

Zero Trust Secure Access Exceptions

Service
Region
Exceptions
Authentication
  • All
  • agent-anz-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • All
  • auth.ztsa-iag.trendmicro.com
  • pac.za.ztsa-iag.trendmicro.com
  • auth.za.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All
  • proxy.ztsa-iag.trendmicro.com
  • proxy.za.ztsa-iag.trendmicro.com
  • d9vbqsel5dvrs.cloudfront.net
Internet Access On-Premises Gateway with Smart Protection Network: Off
  • All
  • xlogr-afs1.xdr.trendmicro.com
  • api.af-south-1.za.ddcloud.trendmicro.com
  • iwsh30-en.url.trendmicro.com
  • api-eu-central-1.crs.trendmicro.com
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
  • d9vbqsel5dvrs.cloudfront.net
Internet Access On-Premises Gateway with Smart Protection Network: On
  • All
  • xlogr-afs1.xdr.trendmicro.com
  • api.af-south-1.za.ddcloud.trendmicro.com
  • ctapi.trendmicro.com
  • iwsh30-p.activeupdate.trendmicro.com
  • d9vbqsel5dvrs.cloudfront.net
Private Access Connector
Australia
  • 20.5.69.128/28
Europe
  • 20.4.51.32/28
India
  • 20.219.254.160/28
Japan
  • 52.140.246.128/28
Singapore
  • 52.187.118.64/28
United States
  • 20.7.52.240/28
Brazil
  • 4.228.193.144/28
MEA
  • 20.74.229.224/28
United Kingdom
  • 20.0.229.192/28
Canada
  • 40.82.166.0/28
South Africa
  • 4.168.215.0/28

Service Gateway Exceptions

Service
Region
Exceptions
Firmware
  • All
  • sgi-thingsboard.za.xdr.trendmicro.com
  • sgi-thingsboard-api.za.xdr.trendmicro.com
  • api.za.xdr.trendmicro.com
  • upload.za.xdr.trendmicro.com
Smart Protection Network proxy: On
  • All
  • ctapi.trendmicro.com
Smart Protection Network proxy: Off
  • All
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
  • grid-global.trendmicro.com
  • rest.mars.trendmicro.com
  • sg-tmsps10-en.gfrbridge.trendmicro.com
  • sg-tmsps10-p.activeupdate.trendmicro.com
Local ActiveUpdate
  • All
Refer to ActiveUpdate session of each product/agent

Network Inventory

Service
Region
Exceptions
Virtual Network Sensor
Canada
Refer to the Virtual Network Sensor exceptions in Firewall exceptions: Canada - all exceptions
Deep Discovery Inspector
Canada
Refer to the Deep Discovery Inspector exceptions in Firewall exceptions: Canada - all exceptions