Zero Trust Secure Access FQDNs/IP Addresses
|
Description
|
FQDN/IP Address
|
Port
|
Used By
|
||||
|
Internet Access - Client Access
|
Internet Access - PAC Mode
|
Private Access - Client Access
|
Private Access - Browser Access
|
Private Access Connector
|
|||
|
Secure Access Module download and upgrade
|
prod.ztsaagent.trendmicro.com |
TCP: 443
|
√
|
√
|
|||
|
Secure Access Module User Behavior Tracking data
feedback
|
event-eu.ztsaagent.trendmicro.com |
TCP: 443
|
√
|
√
|
|||
|
Secure Access Module debug log upload
|
upload.eu.xdr.trendmicro.com/ |
TCP: 443
|
√
|
√
|
|||
|
Internet Access Gateway Proxy Address
|
proxy.ztsa-iag.trendmicro.comproxy.eu.ztsa-iag.trendmicro.comproxy-uk.eu.ztsa-iag.trendmicro.com (for United
Kingdom)proxy-fr.eu.ztsa-iag.trendmicro.com (for France)proxy-sa.eu.ztsa-iag.trendmicro.com (for South
Africa)proxy-me.eu.ztsa-iag.trendmicro.com (for Middle
East)proxy-il.eu.ztsa-iag.trendmicro.com (for Israel)proxy-it.eu.ztsa-iag.trendmicro.com (for Italy)proxy-es.eu.ztsa-iag.trendmicro.com (for Spain) |
TCP: 80/443
|
√
|
√
|
|||
|
Internet Access On-Premises Gateway (via Service Gateway)
Proxy Address
|
FQDN or IP address of the on-premise gateway
|
TCP: 8088
|
√
|
√
|
|||
|
Internet Access On-Premises Gateway (via Service Gateway) NTLM
Auth Proxy Address
|
FQDN or IP address of the on-premise gateway
|
TCP: 8089
|
√
|
√
|
|||
|
Internet Access Gateway PAC file location
|
pac.eu.ztsa-iag.trendmicro.com |
TCP: 80/443
|
√
|
√
|
|||
|
General authentication services (without Foundation Services update)
|
|
TCP: 443
|
|||||
|
General authentication services (with Foundation Services update)
|
|
TCP: 443
|
|||||
|
Internet Access Gateway authentication service
used for:
|
auth.ztsa-iag.trendmicro.comauth.eu.ztsa-iag.trendmicro.com |
TCP: 80/443
|
√
|
||||
|
Private Access service accessed by Secure Access Module
and Private Access Connector
|
agent-eu-rel.ztna.trendmicro.com |
TCP: 443
|
√
|
√
|
√
|
√
|
|
|
Private Access Connector download by users
|
download-eu-rel.ztna.trendmicro.com |
TCP: 443
|
|||||
|
Private Access Connector CDT collect
|
saseztnaprodeusagen2.blob.core.windows.net |
TCP: 443
UDP: 443
|
√
|
||||
|
Private Access Connector firmware upgrade
|
saseztnaprodeusa.blob.core.windows.netztnaextacr.azurecr.io |
TCP: 443
UDP: 443
|
√
|
||||
|
Microsoft Azure IoT Hub
|
sase-ztna-prod-eu-iothub-cntevt.azure-devices.net |
TCP: 443
UDP: 443
|
√
|
√
|
|||
|
Speed test for Secure Access Module, Private Access Connector,
and Private Access User Portal
|
Private Access Connector automatically selects the site that
has the lowest network latency. If you have configured firewalls, Trend Micro
recommends adding all of the following FQDNs:
|
TCP: 443
|
√
|
√
|
√
|
||
|
Private Access Static IP Pool of Cloud Relay Service
|
Private Access Connector automatically selects the site that
has the lowest network latency. If you have configured firewalls, Trend Micro
recommends adding all of the following IP pools:
|
TCP: 443
UDP: 443
|
√
|
√
|
√
|
||
|
Private Access Browser Access End User Portal
|
{Customer_Specified}.myapplications.eu.ztna.trendmicro.com |
TCP: 443
|
√
|
||||
|
Private Access Browser Access Proxy
|
{Customer_Specified}.edge.eu.ztna.trendmicro.com |
TCP: 443
TCP: 80
|
√
|
||||
|
Private Access Browser Access Proxy for Remote Desktop
(RDP)
|
{Customer_Specified}.rdgw.eu.ztna.trendmicro.com |
TCP: 443
TCP: 80
|
√
|
||||
|
Private Access Connector NTP server
|
Default NTP servers are listed as follows. You can configure
your own NTP servers.
|
UDP: 123
|
√
|
||||
|
P2P communication between Private Access Connector and Secure
Access Module
|
Peer's internet IP address
|
UDP: random port number, greater than 10000
|
√
|
√
|
|||