Online Help Center Home
Privacy and Personal Data Collection Disclosure
- Pre-release Disclaimer
- Pre-release Sub-feature Disclaimer
Trend Vision One Data Privacy, Security, and Compliance
What's New
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- Release Notes
Introduction
- Trend Vision One
- Checking the Trend Vision One Service Status
  - SERVICE LEVEL OBJECTIVES FOR TREND VISION ONE (herein this “SLO”)
Getting Started
- Getting Started with Trend Vision One
- Getting Started with Vulnerability Assessment
Risk Insights
- Executive Dashboard
- Attack Surface Discovery
- Operations Dashboard
Dashboards and Reports
- Security Dashboard
  - Customizing the Security Dashboard
  - Protocol Groups in the Scanned Traffic Summary Widget
- Reports
XDR Threat Investigation
- Detection Model Management
- Workbench
  - Alert View
  - Incident View
    - Incident Details
      - Alerts (Incident View)
      - Incident-based Execution Profile
    - Assigning Incidents
- Search App
- Observed Attack Techniques
- Targeted Attack Detection
- Forensics
- Managed Services
- Companion
Threat Intelligence
- Campaign Intelligence
  - Threat Information Screen
- Intelligence Reports
- Suspicious Object Management
  - Suspicious Object List
  - Exception List
    - Adding Exceptions
- Sandbox Analysis
- Third-Party Intelligence
  - TAXII Feeds
    - Configuring a TAXII Feed
  - MISP Feeds
Workflow and Automation
- Security Playbooks
- Response Management
- Third-Party Integration
- API Automation Center
- Service Gateway Management
Zero Trust Secure Access
- Getting Started with Zero Trust Secure Access
- Secure Access Overview
- Secure Access Rules
- Secure Access Resources
- Secure Access History
- Secure Access Configuration
- Troubleshooting Zero Trust Secure Access
Assessment
- Cyber Risk Assessment
Endpoint Security Operations
- Endpoint Inventory 2.0
- Endpoint Inventory
  - Getting Started with XDR for Endpoints
  - Managing the Endpoint List in Endpoint Inventory 1.0
    - Endpoint List Settings in Endpoint Inventory 1.0
- Endpoint Policies
- Trend Cloud One - Endpoint & Workload Security
Endpoint Security Operations (for Standard Endpoint and Server & Workload Protection)
- Getting Started with Trend Vision One Endpoint Security
- Endpoint Inventory
- Standard Endpoint Protection
- Server & Workload Protection
Cloud Security Operations
- Trend Vision One Container Security
- XDR for Containers
  - Getting Started with XDR for Containers
Network Security Operations
- Network Inventory
- Network Intrusion Prevention
Email Security Operations
- Email Account Inventory
  - Email Sensor Management
Mobile Security Operations
- Getting Started with Mobile Security
- Using Mobile Security in Conjunction with MDM Solutions or Azure AD
- Using Mobile Device Director
Service Management
- Product Connector
  - Connecting a Product
  - Required Settings on Supported Products
- Product Instance
- Cloud Accounts
Administration
- User Accounts, Roles, and Single Sign-On (Legacy)
- User Accounts, Identity Providers, and User Roles (July 2023 update)
- Notifications
- Audit Logs
  - User Logs
    - User Log Data
  - System Logs
    - System Log Data
- Console Settings
- License Information
- Credit Usage
- Support Settings
  - Enabling Hypersensitive Mode
Getting Help and Troubleshooting
- Help and Support
  - Creating a Support Case
- Self-Diagnosis

Firewall Exceptions for Virtual Network Sensor

Note:

The FQDNs listed below are for Virtual Network Sensor only. For a full list of all FQDNs and firewall exceptions for Trend Vision One, see Firewall Exception Requirements for Trend Vision One.

The default NTP server is pool.ntp.org (port UDP: 123). Configure your own NTP servers using CLI commands. NTP enables connection to the Network Time Protocol server, allowing the user to configure and synchronize system clocks.

Australia FQDNs
Europe FQDNs
India FQDNs
Japan FQDNs
Singapore FQDNs
United States FQDNs

Table 1. Australia FQDNs
Description	FQDN	Port
Provides updates for product components including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	xns-p.activeupdate.trendmicro.com	TCP: 443
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	api.au.xdr.nacloud.trendmicro.com	TCP: 443
Shares threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	xns-en.fbs25.trendmicro.com	TCP: 443
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.	xlogr-ase2.xdr.trendmicro.com	TCP: 443
Enables connection to Trend Vision One.	api-ni-au.xdr.trendmicro.com	TCP: 443
Business Intelligence Foundation	licenseupdate.trendmicro.com	TCP: 443

Table 2. Europe FQDNs
Description	FQDN	Port
Provides updates for product components including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	xns-p.activeupdate.trendmicro.com	TCP: 443
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	api.eu.xdr.nacloud.trendmicro.com	TCP: 443
Shares threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	xns-en.fbs25.trendmicro.com	TCP: 443
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.	xlogr-ec1.xdr.trendmicro.com	TCP: 443
Enables connection to Trend Vision One.	api-ni-eu.xdr.trendmicro.com	TCP: 443
Business Intelligence Foundation	licenseupdate.trendmicro.com	TCP: 443

Table 3. India FQDNs
Description	FQDN	Port
Provides updates for product components including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	xns-p.activeupdate.trendmicro.com	TCP: 443
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	api.in.xdr.nacloud.trendmicro.com	TCP: 443
Shares threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	xns-en.fbs25.trendmicro.com	TCP: 443
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.	xlogr-as1.xdr.trendmicro.com	TCP: 443
Enables connection to Trend Vision One.	api-ni-in.xdr.trendmicro.com	TCP: 443
Business Intelligence Foundation	licenseupdate.trendmicro.com	TCP: 443

Table 4. Japan FQDNs
Description	FQDN	Port
Provides updates for product components including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	xns-p.activeupdate.trendmicro.com	TCP: 443
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	api.jp.xdr.nacloud.trendmicro.com	TCP: 443
Shares threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	xns-en.fbs25.trendmicro.com	TCP: 443
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.	xlogr-ane1.xdr.trendmicro.com	TCP: 443
Enables connection to Trend Vision One.	api-ni.xdr.trendmicro.com.jp	TCP: 443
Business Intelligence Foundation	licenseupdate.trendmicro.com	TCP: 443

Table 5. Singapore FQDNs
Description	FQDN	Port
Provides updates for product components including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	xns-p.activeupdate.trendmicro.com	TCP: 443
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	api.sg.xdr.nacloud.trendmicro.com	TCP: 443
Shares threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	xns-en.fbs25.trendmicro.com	TCP: 443
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.	xlogr-ase1.xdr.trendmicro.com	TCP: 443
Enables connection to Trend Vision One.	api-ni-sg.xdr.trendmicro.com	TCP: 443
Business Intelligence Foundation	licenseupdate.trendmicro.com	TCP: 443

Table 6. United States FQDNs
Description	FQDN	Port
Provides updates for product components including pattern files. Trend Micro regularly releases component updates through the Trend Micro ActiveUpdate server.	xns-p.activeupdate.trendmicro.com	TCP: 443
A hosted service that provides advanced threat analysis on historical network data based network detections, and other related events as they occur over time.	api.us.xdr.nacloud.trendmicro.com	TCP: 443
Shares threat information with the Smart Protection Network, allowing Trend Micro to rapidly identify and address new threats. Trend Micro Smart Feedback may include product information such as the product name, ID, and version, as well as detection information including file types, SHA-1 hash values, URLs, IP addresses, and domains.	xns-en.fbs25.trendmicro.com	TCP: 443
Extends detection and response beyond the endpoint to offer broader visibility and expert security analytics, leading to more detections and an earlier, faster response. With Trend Vision One, you can respond more effectively to threats, minimizing the severity and scope of a breach.	xlogr-ue1.xdr.trendmicro.com	TCP: 443
Enables connection to Trend Vision One.	api-ni.xdr.trendmicro.com	TCP: 443
Business Intelligence Foundation	licenseupdate.trendmicro.com	TCP: 443