India - Firewall Exceptions
|
Service |
FQDN |
Description |
|---|---|---|
|
Assessment Service |
https://assessment-ap5.mgcp.trendmicro.com |
Back-end server |
|
https://release-us1.mgcp.trendmicro.com |
Assessment tool download |
|
|
https://cti-us1.mgcp.trendmicro.com |
Windows CTI rules download |
|
|
Download Center |
download.xdr.trendmicro.com |
Download center for XDR customer |
|
Endpoint Basecamp |
api-ap5.xbc.trendmicro.com |
Endpoint Basecamp API gateway |
|
cdn-api-ap5.xbc.trendmicro.com |
The CDN location |
|
|
a1bz7u2flvp09t-ats.iot.ap-south-1.amazonaws.com |
Amazon domain for WSC persistent connection |
|
|
tgw-ap5.mgcp.trendmicro.com |
Cloud endpoint telemetry agent API Gateway |
|
|
release-us1.mgcp.trendmicro.com |
Download center for endpoint release package |
|
|
support-connector-api.manage.trendmicro.com |
For SCP API connection |
|
|
supportconnectorpacks.manage.trendmicro.com |
Download center for SCP package |
|
|
rpcollectedthings.manage.trendmicro.com |
To upload SCP result |
|
|
Endpoint Inventory |
http://cloudendpoint-ap5.mgcp.trendmicro.com |
Agent Portal API Gateway |
|
release-us1.mgcp.trendmicro.com |
Download center for endpoint release package |
|
|
supportconnectorpacks.manage.trendmicro.com |
Download center for iES tool and LogCounter |
|
|
Endpoint Response |
er-ws-as1.xdr.trendmicro.com |
API Gateway |
|
era-installer-ue1.xdr.trendmicro.com |
Download center for endpoint response release package |
|
|
era-as1.xdr.trendmicro.com |
ELB FQDN |
|
|
Endpoint Security Policies |
endpointpolicy-cdn-ap5.xbc.trendmicro.com |
Policy content download Cloudfront CDN |
|
Endpoint Sensor |
https://files.trendmicro.com |
Download center for XDR Linux Sensor Kernel Module |
|
Feedback Service |
matomo.xdr.trendmicro.com |
User feedback collection |
|
IDP |
tm.login.trendmicro.com iamservice.trendmicro.com www.google.com (Google Recaptcha) www.gstatic.com (Google Recaptcha) |
Trend Micro login service for Trend Micro Vision One and Customer Licensing Portal |
|
IDP (Legacy) |
sso.in.xdr.trendmicro.com |
SSO authentication service (Legacy, redirect to tm.login.trendmicro.com) |
|
IDP (UIC) |
login.in.xdr.trendmicro.com |
SSO authentication service |
|
In-App Guides |
data.analytics.trendmicro.com/ |
Provides in-app guides and customer feedback data |
|
content.analytics.trendmicro.com |
Guide content |
|
|
Log Receiver |
xlogr-as1.xdr.trendmicro.com |
XDR log receiver service |
|
Mobile Security |
rest-g.mars.trendmicro.com |
Mobile application reputation smart query for mobile enterprise security |
|
mint.mars.trendmicro.com |
Mobile OS vulnerability query for mobile enterprise security |
|
|
rest-g-au.mars.trendmicro.com |
Mobile pattern update for mobile enterprise security |
|
|
Network Inventory |
api-ni-in.xdr.trendmicro.com |
DDI registration to Network Inventory |
|
Portal (UIC) |
portal.in.xdr.trendmicro.com |
Major portal access to XDR console |
|
Risk Insights Log Receiver (Legacy) |
ingestor-in.xdr.trendmicro.com |
Log receiver for third-parties using the Trend Micro Risk Insights for Splunk app (migrating to unified log receiver) |
|
Service Platform |
api.in.xdr.trendmicro.com api-cert.in.xdr.trendmicro.com |
Public API and other connection services |
|
Upload Center |
upload.in.xdr.trendmicro.com |
File collection or other services that operate by customer to upload files to XDR |
|
Description |
FQDN |
|---|---|
|
Apex One SaaS console DNS (refer to license email) |
<console_DNS>.manage.trendmicro.com |
|
License server |
licenseupdate.trendmicro.com |
|
ActiveUpdate server: Windows |
osce14-p.activeupdate.trendmicro.com/activeupdate |
|
ActiveUpdate server: Mac |
tmsm35-p.activeupdate.trendmicro.com/activeupdate |
|
ActiveUpdate server: Toolbox |
toolbox10-p.activeupdate.trendmicro.com/activeupdate |
|
Apex One Telemetry Service |
asm01-nabu-prod.aot.trendmicro.com api-nabu.aot.trendmicro.com |
|
Global Smart Scan Server for Apex One Agent |
osce14.icrc.trendmicro.com/tmcss |
|
Web Rating Service for Apex One Agent |
osce14-0-en.url.trendmicro.com |
|
Smart Feedback for Apex One Agent |
osce140-en.fbs25.trendmicro.com |
|
Goodware File Reputation Service for Apex One Agent |
osce14-en.gfrbridge.trendmicro.com |
|
Community File Reputation Service for Apex One Agent |
osce14-en-census.trendmicro.com |
|
Predictive Machine Learning (File) for Apex One Agent |
osce140-en-f.trx.trendmicro.com |
|
Predictive Machine Learning (Behavior) for Apex One Agent |
osce140-en-b.trx.trendmicro.com |
|
MacOS threat smart query |
mcs.trendmicro.com |
|
Description |
FQDN |
|---|---|
|
Firmware update for Service Gateway virtual appliance |
as1-external.asg.xdr.trendmicro.com |
|
Services update for Service Gateway virtual appliance, such as Smart Protection Service , ActiveUpdate service, SO List synch service and Third-party intelligence sync service etc. |
049597112809.dkr.ecr.ap-south-1.amazonaws.com |
|
Notification/push channel for Service Gateway virtual appliance. |
a1v3de23inj3up-ats.iot.ap-south-1.amazonaws.com |
|
Debug log collection for Service Gateway virtual appliance. |
in-v1-sg-ctd-log.s3.ap-south-1.amazonaws.com |
|
Web Reputation Service for Service Gateway SPS |
sg-tmsps10-en.url.trendmicro.com |
|
Web Inspection Service for Service Gateway SPS |
sg-tmsps10-en-wis.trendmicro.com |
|
Community File Reputation Service for Service Gateway SPS |
sg-tmsps100-en-census.trendmicro.com |
|
Community Domain/IP Reputation Service for Service Gateway SPS |
sg-tmsps100-en-domaincensus.trendmicro.com |
|
Certified Safe Software Service for Service Gateway SPS |
grid-global.trendmicro.com |
|
Mobile App Reputation Service for Service Gateway SPS |
rest.mars.trendmicro.com |
|
Goodware File Reputation Service for Service Gateway SPS |
sg-tmsps10-en.gfrbridge.trendmicro.com |
|
Global AU URLs for Service Gateway ActiveUpdate service to serve Apex One/OfficeScan (v11-v14) , DDI (v5.6-v.60), DS (v10-v20) and Service Gateway SPS |
osce14-p.activeupdate.trendmicro.com/activeupdate osce12-p.activeupdate.trendmicro.com/activeupdate osce11-p.activeupdate.trendmicro.com/activeupdate ddi60-p.activeupdate.trendmicro.com/activeupdate ddi58-p.activeupdate.trendmicro.com/activeupdate ddi57-p.activeupdate.trendmicro.com/activeupdate ddi56-p.activeupdate.trendmicro.com/activeupdate ipv6-iaus.trendmicro.com/iau_server.dll sg-tmsps10-p.activeupdate.trendmicro.com/activeupdate/ |
|
Description |
FQDN |
|---|---|
|
Secure Access Module download and upgrade |
prod.ztsaagent.trendmicro.com |
|
Secure Access Module User Behavior Tracking data feedback |
dc.services.visualstudio.com |
|
Internet Access Gateway service accessed by Secure Access Module |
agent.in.ztsa-iag.trendmicro.com |
|
Private Access service accessed by Secure Access Module and Private Access Connector |
agent-in-rel.ztna.trendmicro.com |
|
Private Access Connector download |
download-in-rel.ztna.trendmicro.com |
|
Private Access Connector CDT collect |
saseztnaprodinsagen2.blob.core.windows.net |
|
Private Access Connector firmware upgrade |
saseztnaprodinsa.blob.core.windows.net |
|
Internet Access Gateway Proxy Address |
proxy.in.ztsa-iag.trendmicro.com proxy.ztsa-iag.trendmicro.com |
|
Internet Access Gateway Pac file location |
pac.in.ztsa-iag.trendmicro.com |
|
Internet Access Gateway auth service for agent-less mode (without Secure Access Module) |
auth.in.ztsa-iag.trendmicro.com auth.ztsa-iag.trendmicro.com |
