Configuring Service Gateway Settings

Configure update settings and manage the Service Gateway certificate.

  1. Go to Inventory Management > Service Gateway Inventory.
  2. Find the Service Gateway and click the gear icon in the Action column.

    The Service Gateway Settings panel appears.

  3. To enable or disable a service, toggle the switch next to the service name.
    Service Supported products Description

    ActiveUpdate

    • Apex One / OfficeScan 11-14

    • Deep Discovery Inspector 5.6-6.0

    • Deep Security 10-20

    Serves on-premises Trend Micro products as a local ActiveUpdate server to reduce outgoing internet traffic.

    Smart Protection Services

    For more information on Smart Protection Services support, see Products and Services supported by Service Gateway Smart Protection Services.

    Leverages file reputation and web reputation technology to detect security risks. On-premises Trend Micro products can perform queries against the Service Gateway virtual appliance, which provides Smart Protection either through the local Smart Protection Server on the virtual appliance or as a reverse proxy.

    Suspicious Object List synchronization

    • Deep Discovery Inspector 5.8 SP1 and above

    • Deep Discovery Analyzer 7.1 and above

    • TippingPoint Security Management System 5.5 and above

    Requires an API key. To obtain the key, go to Inventory Management > Service Gateway Inventory and click Manage API Key.

    Supports the sharing of Suspicious Object lists between Trend Micro Vision One and on-premises Trend Micro products.

    Third-party intelligence synchronization

    For more information on integrating third-party applications, see Third-Party Integration.

    Shares threat intelligence from Trend Micro Vision One with third-party applications or retrieves threat intelligence from third-party applications.

    Log forwarding

    TippingPoint Security Management System 5.5 Patch 1 and above

    Requires an API key. To obtain the key, go to Inventory Management > Service Gateway Inventory and click Manage API Key.

    Supports forwarding logs to Trend Micro Vision One for correlation and analysis.

    Active Directory connection

    Active Directory services (on-premises) supported on the following Windows operating systems:

    • Windows Server 2022

    • Windows Server 2019

    • Windows Server 2016

    • Windows Server 2012

    For more information, see Third-Party Integration.

    Supports sharing objects and activity data from Active Directory servers with Trend Micro Vision One.

    Forward proxy

    Trend Micro Vision One endpoints with the following operating systems:

    • Windows
    • macOS

    Allows endpoints with no direct access to the internet to use the service gateway as a proxy to reach Trend Micro Vision One.

    Requires deployment using a deployment script. For details, see Deploying the Agent Installer with Service Gateway Forward Proxy.

    Once you have enabled ActiveUpdate or Smart Protection Services, configure your Trend Micro product with the addresses listed on the Service Gateway details screen. To view the addresses, click the Service Gateway name on the Service Gateway Inventory screen and click View server addresses under ActiveUpdate or Smart Protection Services.

  4. To set up scheduled update for connected products' components, select Product Component Update and specify how often to perform an update.

    You can click Configure update sources to add, enable, or disable a source for your product.

  5. To set up automatic update for the Service Gateway, select Automatic update and specify the preferred update time.
  6. To prevent the update from using up network bandwidth, set limits by selecting Restrict download speed and Restrict upload speed.
  7. To upload a certificate, click Import certificate.
    Note:
    • The certificate must contain both RSA PRIVATE KEY and CERTIFICATE.

    • Only PKCS#1 certificates are supported.

  8. Click Save.