Singapore - Firewall Exceptions for Service Gateway

Note:

The FQDNs listed below are for Service Gateway only. For a full list of all FQDNs and firewall exceptions, see Singapore - Firewall Exceptions.

Table 1. Service Gateway FQDNs

Description

Service Gateway Version

FQDN

Smart Protection Network (SPN) Proxy for Smart Protection Services

2.0

ctapi.trendmicro.com

Remote Shell for Troubleshooting Service Gateway

2.0

sgi-tunneling.sg.xdr.trendmicro.com

Setting Synchronization for Service Gateway

2.0

sgi-iot.sg.xdr.trendmicro.com

Web Reputation Service for Smart Protection Services

1.0 and 2.0

sg-tmsps10-en.url.trendmicro.com

Web Inspection Service for Smart Protection Services

1.0 and 2.0

sg-tmsps10-en-wis.trendmicro.com

Community File Reputation Service for Smart Protection Services

1.0 and 2.0

sg-tmsps100-en-census.trendmicro.com

Community Domain/IP Reputation Service for Smart Protection Services

1.0 and 2.0

sg-tmsps100-en-domaincensus.trendmicro.com

Certified Safe Software Service for Smart Protection Services

1.0 and 2.0

grid-global.trendmicro.com

Mobile App Reputation Service for Smart Protection Services

1.0 and 2.0

rest.mars.trendmicro.com

Goodware File Reputation Service for Smart Protection Services

1.0 and 2.0

sg-tmsps10-en.gfrbridge.trendmicro.com

Service Gateway internal Smart Protection Server

1.0 and 2.0

sg-tmsps10-p.activeupdate.trendmicro.com/activeupdate/

Firmware update for Service Gateway virtual appliance

1.0

ase1-external.asg.xdr.trendmicro.com

Services update for Service Gateway virtual appliance, such as Smart Protection Services, ActiveUpdate service, SO List synch service and Third-party intelligence sync service etc.

1.0

049597112809.dkr.ecr.ap-southeast-1.amazonaws.com

Notification/push channel for Service Gateway virtual appliance.

1.0

a1v3de23inj3up-ats.iot.ap-southeast-1.amazonaws.com

Debug log collection via CLI and firmware update package for Service Gateway virtual appliance.

1.0

sg-v1-sg-cdt-log.s3.ap-southeast-1.amazonaws.com

Table 2. Required XDR Services

Service

FQDN

Description

Portal (UIC)

portal.sg.xdr.trendmicro.com

Major portal access to XDR console

Service Platform

api.sg.xdr.trendmicro.com

api-cert.sg.xdr.trendmicro.com

Public API and other connection services

Upload Center

upload.sg.xdr.trendmicro.com

File collection or other services that operate by customer to upload files to XDR

Note:

Required for Service Gateway 2.0 service and firmware update for virtual appliance.

Table 3. Global ActiveUpdate URLs for Service Gateway 1.0/2.0

Product/Service

Version

ActiveUpdate URL

Apex One

All versions

osce14-p.activeupdate.trendmicro.com/activeupdate

Deep Discovery Inspector

6.2

ddi62-p.activeupdate.trendmicro.com/activeupdate

6.0

ddi60-p.activeupdate.trendmicro.com/activeupdate

5.8

ddi58-p.activeupdate.trendmicro.com/activeupdate

5.7

ddi57-p.activeupdate.trendmicro.com/activeupdate

5.6

ddi56-p.activeupdate.trendmicro.com/activeupdate

Deep Security

All versions

ipv6-iaus.trendmicro.com/iau_server.dll

OfficeScan

XG

osce12-p.activeupdate.trendmicro.com/activeupdate

11.0

osce11-p.activeupdate.trendmicro.com/activeupdate