Service Addresses and Ports

Deep Discovery Analyzer accesses several Trend Micro services to obtain information about emerging threats and to manage your existing Trend Micro products. The following table describes each service and provides the required address and port information accessible to the product version in your region.

Table 1. Service Addresses and Ports

Service

Description

Address and Port

ActiveUpdate Server

Provides updates for product components, including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.

ddan70-p.activeupdate.trendmicro.com/activeupdate:443

Certified Safe Software Service (CSSS)

Verifies the safety of files. Certified Safe Software Service reduces false positives, and saves computing time and resources.

grid-global.trendmicro.com/ws/level-0/files:443

Sandbox as a Service (for macOS)

A hosted service that analyzes possible threats for macOS.

ddaaas.trendmicro.com:443

Community Domain/IP Reputation Service

Determines the prevalence of detected domains and IP addresses. Prevalence is a statistical concept referring to the number of times a domain or IP address was detected by Trend Micro sensors at a given time.

ddan700-en-domaincensus.trendmicro.com:443

Community File Reputation

Determines the prevalence of detected files. Prevalence is a statistical concept referring to the number of times a file was detected by Trend Micro sensors at a given time.

ddan700-en-census.trendmicro.com:443

Customer Licensing Portal

Manages your customer information, subscriptions, and product or service license.

licenseupdate.trendmicro.com/ollu/license_update.aspx:443

Dynamic URL Scanning

Performs real-time analysis of URLs to detect zero-day attacks.

ddan7-0-en-t0.url.trendmicro.com:443

ddan7-0-en-t0-backup.url.trendmicro.com:443

Predictive Machine Learning engine

Through use of malware modeling, Predictive Machine Learning compares samples to the malware models, assigns a probability score, and determines the probable malware type that a file contains.

ddan70-en-f.trx.trendmicro.com:443

Smart Feedback

Shares anonymous threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.

ddan700-en.fbs25.trendmicro.com:443

Threat Connect

Correlates suspicious objects detected in your environment and threat data from the Trend Micro Smart Protection Network. The resulting intelligence reports enable you to investigate potential threats and take actions pertinent to your attack profile.

ddan70-threatconnect.trendmicro.com:443

Web Inspection Service

Web Inspection Service is an auxiliary service of Web Reputation Services, providing granular levels of threat results and comprehensive threat names to users.

The threat name and severity can be used as filtering criteria for proactive actions and further intensive scanning.

ddan7-0-en-wis.trendmicro.com:443

Web Reputation Services

Tracks the credibility of web domains. Web Reputation Services assigns reputation scores based on factors such as a website's age, historical location changes, and indications of suspicious activities discovered through malware behavior analysis.

ddan7-0-en.url.trendmicro.com:443

ddan7-0-en-backup.url.trendmicro.com:443