Views:
The following firewall exceptions apply to networks with:

Trend Vision One Exceptions

Service / Agent
Region
Exceptions
Authentication
  • All
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net

Endpoint Security Exceptions

Service / Agent
Region
Exceptions
Endpoint Sensor Agents
  • UAE
  • assessment-mea.mgcp.trendmicro.com
  • release-us1.mgcp.trendmicro.com
  • cti-us1.mgcp.trendmicro.com
  • api-mea.xbc.trendmicro.com
  • tgw-mea.mgcp.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.manage.trendmicro.com
  • cloudendpoint-mea.mgcp.trendmicro.com
  • er-ws-ase1.xdr.trendmicro.com
  • era-mea.xdr.trendmicro.com
  • endpointpolicy-cdn-mea.xbc.trendmicro.com
  • files.trendmicro.com
  • xlogr-mea.xdr.trendmicro.com
  • api.mea.xdr.trendmicro.com
  • api-cert.mea.xdr.trendmicro.com
  • upload.mea.xdr.trendmicro.com
  • wsc-mea.xbc.trendmicro.com
  • files.trendmicro.com
  • ipv6-iaus.trendmicro.com
  • ipv6-iaus.activeupdate.trendmicro.com
  • iaus.activeupdate.trendmicro.com
  • iaus.trendmicro.com
Standard Endpoint Protection Agents
  • All
  • <Apex One console_DNS>.manage.trendmicro.com
    (refer to license email)
  • licenseupdate.trendmicro.com
  • asm01-nabu-prod.aot.trendmicro.com
  • api-nabu.aot.trendmicro.com
  • osce14-p.activeupdate.trendmicro.com
  • tmsm35-p.activeupdate.trendmicro.com
  • activeupdate.trendmicro.com
  • osce14.icrc.trendmicro.com
  • osce14-0-en.url.trendmicro.com
  • osce140-en.fbs25.trendmicro.com
  • osce14-en.gfrbridge.trendmicro.com
  • osce14-en-census.trendmicro.com
  • osce14bak-en-census.trendmicro.com
  • osce140-en-f.trx.trendmicro.com
  • oscecmp140-en-f.trx.trendmicro.com
  • osce140-en-b.trx.trendmicro.com
  • mcs.trendmicro.com
  • www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/
  • files.trendmicro.com
  • aurd-test2.activeupdate.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • support-connector-service.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.blob.core.windows.net
  • aurd-test2.activeupdate.trendmicro.com
  • support-connector-api.manage.trendmicro.com
  • support-connector-service.manage.trendmicro.com
  • supportconnectorpacks.manage.trendmicro.com
  • rpcollectedthings.blob.core.windows.net
Server & Workload Protection Agents
Important
Important
If you enable endpoint sensor detection and response, you must also add the Endpoint Sensor Agents exceptions.
  • UAE
  • workload.ae-1.cloudone.trendmicro.com
  • agents.workload.ae-1.cloudone.trendmicro.com
  • <agents-001 through agents-010>.workload.ae-1.cloudone.trendmicro.com
  • agent-comm.workload.ae-1.cloudone.trendmicro.com
  • dsmim.workload.ae-1.cloudone.trendmicro.com
  • relay.workload.ae-1.cloudone.trendmicro.com
  • xdr-resp-ioc.workload.ae-1.cloudone.trendmicro.com
  • gateway.workload.ae-1.cloudone.trendmicro.com
  • gateway-control.workload.ae-1.cloudone.trendmicro.com
  • files.trendmicro.com
  • iaus.activeupdate.trendmicro.com
  • iaus.trendmicro.com
  • ipv6-iaus.trendmicro.com
  • ipv6-iaus.activeupdate.trendmicro.com
  • dsaas1100-en-census.trendmicro.com
  • ds200-en.fbs25.trendmicro.com
  • ds200-jp.fbs25.trendmicro.com
  • dsaas.icrc.trendmicro.com
  • dsaas-en-f.trx.trendmicro.com
  • dsaas-en-b.trx.trendmicro.com
  • deepsecaas11-en.gfrbridge.trendmicro.com
  • dsaas.url.trendmicro.com
Zero Trust Secure Access Exceptions
Important
Important
You must also specify the exceptions for the Endpoint Sensor Agents. These exceptions are found at Endpoint Sensor Agents.
Service / Agent
Region
Exceptions
Authentication
  • All
  • agent-mea-rel.ztna.trendmicro.com
  • signin.v1.trendmicro.com
  • tm.login.trendmicro.com
  • iamservice.trendmicro.com
  • Other custom IDP services
Google reCAPTCHA:
  • www.gstatic.com
  • fonts.gstatic.com
  • Plus one of the following:
    • www.google.com (recommended)
    • www.recaptcha.net
Internet Access Service
  • All
  • auth.ztsa-iag.trendmicro.com
  • UAE
  • pac.mea.ztsa-iag.trendmicro.com
  • auth.mea.ztsa-iag.trendmicro.com
Internet Access Cloud Gateway
  • All
  • proxy.ztsa-iag.trendmicro.com
  • UAE
  • proxy.mea.ztsa-iag.trendmicro.com
Internet Access On-premises Gateway with SPN proxy: Off
  • UAE (with Log Receiver)
  • xlogr-mea.xdr.trendmicro.com
  • All (with Sandbox Analysis)
  • api.me-central-1.uae.ddcloud.trendmicro.com
  • All (with Web Reputation Service)
  • iwsh30-en.url.trendmicro.com
  • All (with Cloud Reputation Service)
  • api-eu-central-1.crs.trendmicro.com
  • All (with Predictive Machine Learning)
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
  • All (with ActiveUpdate)
  • iwsh30-p.activeupdate.trendmicro.com
Internet Access On-premises Gateway with SPN proxy: On
  • UAE (with Log Receiver)
  • xlogr-mea.xdr.trendmicro.com
  • All (with Sandbox Analysis)
  • api.me-central-1.uae.ddcloud.trendmicro.com
  • All (with Web Reputation Service)
  • ctapi.trendmicro.com
  • All (with Cloud Reputation Service)
  • ctapi.trendmicro.com
  • All (with Predictive Machine Learning)
  • ctapi.trendmicro.com
  • All (with ActiveUpdate)
  • iwsh30-p.activeupdate.trendmicro.com

Forensics and Analysis

Service / Agent
Region
Exceptions
IR Tool Download for Agent
  • UAE
  • resources.prod-me-central-1.irs.trendmicro.com

Network Inventory

Service / Agent
Region
Exceptions
Virtual Network Sensor
  • UAE
  • xns-p.activeupdate.trendmicro.com
  • api.mea.xdr.nacloud.trendmicro.com
  • xns-en.fbs25.trendmicro.com
  • xlogr-mea.xdr.trendmicro.com
  • api-ni-mea.xdr.trendmicro.com
  • licenseupdate.trendmicro.com
For customers with "Send to Sandbox" enabled:
  • grid-global.trendmicro.com
  • api.ddcloud.trendmicro.com
  • api.me-central-1.uae.ddcloud.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: On
  • All
  • api-ni-mea.xdr.trendmicro.com
  • xlogr-ue1.xdr.trendmicro.com
  • api.mea.xdr.nacloud.trendmicro.com
  • api.mea.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi67-p.activeupdate.trendmicro.com/activeupdate/japan
  • ddi6-7-jp-t0.url.trendmicro.com
  • ddi67-jp-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi67.retroscan.trendmicro.com
  • gd.fbs.trendmicro.com
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.7 or later with Smart Protection Network Proxy: Off
  • All
  • api-ni-mea.xdr.trendmicro.com
  • xlogr-ue1.xdr.trendmicro.com
  • api.mea.xdr.nacloud.trendmicro.com
  • api.mea.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi67-p.activeupdate.trendmicro.com/activeupdate/japan
  • ddi6-7-jp-t0.url.trendmicro.com
  • ddi67-jp-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi67.retroscan.trendmicro.com
  • gd.fbs.trendmicro.com
  • ddi6-7-jp.url.trendmicro.com
  • ddi6-7-jp-wis.trendmicro.com
  • ddi670-jp-census.trendmicro.com
  • ddi670-jp-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: On
  • All
  • api-ni-mea.xdr.trendmicro.com
  • xlogr-ase2.xdr.trendmicro.com
  • api.mea.xdr.nacloud.trendmicro.com
  • api.en.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi66-p.activeupdate.trendmicro.com/activeupdate
  • ddi65-p.activeupdate.trendmicro.com/activeupdate
  • ddi62-p.activeupdate.trendmicro.com/activeupdate
  • ddi60-p.activeupdate.trendmicro.com/activeupdate
  • ddi58-p.activeupdate.trendmicro.com/activeupdate
  • ddi57-p.activeupdate.trendmicro.com/activeupdate
  • ddi6-6-en-t0.url.trendmicro.com
  • ddi6-5-en-t0.url.trendmicro.com
  • ddi6-2-en-t0.url.trendmicro.com
  • ddi6-0-en-t0.url.trendmicro.com
  • ddi5-8-en-t0.url.trendmicro.com
  • ddi5-7-en-t0.url.trendmicro.com
  • ddi66-en-f.trx.trendmicro.com
  • ddi65-en-f.trx.trendmicro.com
  • ddi62-en-f.trx.trendmicro.com
  • ddi60-en-f.trx.trendmicro.com
  • ddi58-en-f.trx.trendmicro.com
  • ddi57-en-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi66.retroscan.trendmicro.com
  • ddi65-retroscan.trendmicro.com
  • ddi62-retroscan.trendmicro.com
  • ddi60-retroscan.trendmicro.com
  • ddi58-retroscan.trendmicro.com
  • ddi57-retroscan.trendmicro.com
  • ddi660-en.fbs25.trendmicro.com
  • ddi650-en.fbs25.trendmicro.com
  • ddi620-en.fbs25.trendmicro.com
  • ddi600-en.fbs25.trendmicro.com
  • ddi580-en.fbs25.trendmicro.com
  • ddi570-en.fbs25.trendmicro.com
  • sg-tmsps10-en.url.trendmicro.com
  • sg-tmsps10-en-wis.trendmicro.com
  • sg-tmsps100-en-census.trendmicro.com
  • sg-tmsps100-en-domaincensus.trendmicro.com
Deep Discovery Inspector version 6.6 or earlier with Smart Protection Network Proxy: Off
  • All
  • api-ni-mea.xdr.trendmicro.co
  • xlogr-ase2.xdr.trendmicro.com
  • api.mea.xdr.nacloud.trendmicro.com
  • api.en.ddcloud.trendmicro.com
  • grid-global.trendmicro.com
  • licenseupdate.trendmicro.com
  • rest.mars.trendmicro.com
  • ddaaas.trendmicro.com
  • ddi66-p.activeupdate.trendmicro.com/activeupdate
  • ddi65-p.activeupdate.trendmicro.com/activeupdate
  • ddi62-p.activeupdate.trendmicro.com/activeupdate
  • ddi60-p.activeupdate.trendmicro.com/activeupdate
  • ddi58-p.activeupdate.trendmicro.com/activeupdate
  • ddi57-p.activeupdate.trendmicro.com/activeupdate
  • ddi660-en-domaincensus.trendmicro.com
  • ddi650-en-domaincensus.trendmicro.com
  • ddi620-en-domaincensus.trendmicro.com
  • ddi600-en-domaincensus.trendmicro.com
  • ddi580-en-domaincensus.trendmicro.com
  • ddi570-en-domaincensus.trendmicro.com
  • ddi660-en-census.trendmicro.com
  • ddi650-en-census.trendmicro.com
  • ddi620-en-census.trendmicro.com
  • ddi600-en-census.trendmicro.com
  • ddi580-en-census.trendmicro.com
  • ddi570-en-census.trendmicro.com
  • ddi6-6-en-t0.url.trendmicro.com
  • ddi6-5-en-t0.url.trendmicro.com
  • ddi6-2-en-t0.url.trendmicro.com
  • ddi6-0-en-t0.url.trendmicro.com
  • ddi5-8-en-t0.url.trendmicro.com
  • ddi5-7-en-t0.url.trendmicro.com
  • ddi66-en-f.trx.trendmicro.com
  • ddi65-en-f.trx.trendmicro.com
  • ddi62-en-f.trx.trendmicro.com
  • ddi60-en-f.trx.trendmicro.com
  • ddi58-en-f.trx.trendmicro.com
  • ddi57-en-f.trx.trendmicro.com
  • intelliconnect.trendmicro.com
  • ddi66.retroscan.trendmicro.com
  • ddi65-retroscan.trendmicro.com
  • ddi62-retroscan.trendmicro.com
  • ddi60-retroscan.trendmicro.com
  • ddi58-retroscan.trendmicro.com
  • ddi57-retroscan.trendmicro.com
  • ddi660-en.fbs25.trendmicro.com
  • ddi650-en.fbs25.trendmicro.com
  • ddi620-en.fbs25.trendmicro.com
  • ddi600-en.fbs25.trendmicro.com
  • ddi580-en.fbs25.trendmicro.com
  • ddi570-en.fbs25.trendmicro.com
  • ddi6-6-en-wis.trendmicro.com
  • ddi6-5-en-wis.trendmicro.com
  • ddi6-2-en-wis.trendmicro.com
  • ddi6-0-en-wis.trendmicro.com
  • ddi5-8-en-wis.trendmicro.com
  • ddi5-7-en-wis.trendmicro.com
  • ddi6-6-en.url.trendmicro.com
  • ddi6-5-en.url.trendmicro.com
  • ddi6-2-en.url.trendmicro.com
  • ddi6-0-en.url.trendmicro.com
  • ddi5-8-en.url.trendmicro.com
  • ddi5-7-en.url.trendmicro.com
Service / Agent
Region
Exceptions
Log Receiver
  • UAE
  • xlogr-mea.xdr.trendmicro.com
Sandbox Analysis
  • All
  • api.me-central-1.uae.ddcloud.trendmicro.com
Web Reputation Service
  • All
  • iwsh30-en.url.trendmicro.com
Cloud Reputation Service
  • All
  • api-eu-central-1.crs.trendmicro.com
Predictive Machine Learning
  • All
  • iwsh300-en.census.trendmicro.com
  • iwsaas30-en-f.trx.trendmicro.com
ActiveUpdate server
  • All
  • iwsh30-p.activeupdate.trendmicro.com