Europe - Zero Trust Secure Access FQDNs/IP Addresses
|
Description |
FQDN/IP Address |
Port |
Used By |
||||
|---|---|---|---|---|---|---|---|
|
Internet Access - Client Access |
Internet Access - PAC Mode |
Private Access - Client Access |
Private Access - Browser Access |
Private Access Connector |
|||
|
Secure Access Module download and upgrade |
prod.ztsaagent.trendmicro.com |
TCP: 443 |
√ |
√ |
|||
|
Secure Access Module User Behavior Tracking data feedback |
event-eu.ztsaagent.trendmicro.com |
TCP: 443 |
√ |
√ |
|||
|
Secure Access Module debug log upload |
upload.eu.xdr.trendmicro.com/ |
TCP: 443 |
√ |
√ |
|||
|
Internet Access Gateway service accessed by Secure Access Module |
agent.eu.ztsa-iag.trendmicro.com |
TCP: 443 |
√ |
||||
|
Internet Access Gateway Proxy Address |
proxy.ztsa-iag.trendmicro.com proxy.eu.ztsa-iag.trendmicro.com proxy-uk.eu.ztsa-iag.trendmicro.com (for United Kingdom) proxy-fr.eu.ztsa-iag.trendmicro.com (for France) proxy-sa.eu.ztsa-iag.trendmicro.com (for South Africa) proxy-me.eu.ztsa-iag.trendmicro.com (for Middle of East) proxy-il.eu.ztsa-iag.trendmicro.com (for Israel) |
TCP: 80/443 |
√ |
√ |
|||
|
Internet Access On-Premises Gateway (via Service Gateway) Proxy Address |
FQDN or IP address of the on-premise gateway |
TCP: 8088 |
√ |
√ |
|||
|
Internet Access On-Premises Gateway (via Service Gateway) NTLM Auth Proxy Address |
FQDN or IP address of the on-premise gateway |
TCP: 8089 |
√ |
√ |
|||
|
Internet Access On-Premises Gateway (via Service Gateway) ICAP Service Address |
FQDN or IP address of the on-premise gateway |
TCP: 1344/11344 |
|||||
|
Internet Access Gateway PAC file location |
pac.eu.ztsa-iag.trendmicro.com |
TCP: 80/443 |
√ |
√ |
|||
|
Internet Access Gateway auth service for agent-less mode (without Secure Access Module) |
auth.ztsa-iag.trendmicro.com auth.eu.ztsa-iag.trendmicro.com |
TCP: 80/443 |
√ |
||||
|
Private Access service accessed by Secure Access Module and Private Access Connector |
agent-eu-rel.ztna.trendmicro.com |
TCP: 443 |
√ |
√ |
√ |
√ |
|
|
Private Access Connector download by users |
download-eu-rel.ztna.trendmicro.com |
TCP: 443 |
|||||
|
Private Access Connector CDT collect |
saseztnaprodeusagen2.blob.core.windows.net |
TCP: 443 UDP: 443 |
√ |
||||
|
Private Access Connector firmware upgrade |
saseztnaprodeusa.blob.core.windows.net ztnaextacr.azurecr.io |
TCP: 443 UDP: 443 |
√ |
||||
|
Microsoft Azure IoT Hub |
sase-ztna-prod-eu-iothub-cntevt.azure-devices.net |
TCP: 443 UDP: 443 |
√ |
√ |
|||
|
Speed test for Secure Access Module, Private Access Connector, and Private Access User Portal |
Private Access Connector automatically selects the site that has the lowest network latency. If you have configured firewalls, Trend Micro recommends adding all of the following FQDNs:
|
TCP: 443 |
√ |
√ |
√ |
||
|
Private Access Static IP Pool of Cloud Relay Service |
Private Access Connector automatically selects the site that has the lowest network latency. If you have configured firewalls, Trend Micro recommends adding all of the following IP pools:
|
TCP: 443 UDP: 443 |
√ |
√ |
√ |
||
|
Private Access Browser Access End User Portal |
{Customer_Specified}.myapplications.eu.ztna.trendmicro.com |
TCP: 443 |
√ |
||||
|
Private Access Browser Access Proxy |
{Customer_Specified}.edge.eu.ztna.trendmicro.com |
TCP: 443 TCP: 80 |
√ |
||||
|
Private Access Browser Access Proxy for Remote Desktop (RDP) |
{Customer_Specified}.rdgw.eu.ztna.trendmicro.com |
TCP: 443 TCP: 80 |
√ |
||||
|
Private Access Connector NTP server |
Default NTP servers are listed as follows. You can configure your own NTP servers.
|
UDP: 123 |
√ |
||||
|
P2P communication for Private Access Connector and Secure Access Module |
Peer's internet IP address |
UDP: random port number, greater than 10000 |
√ |
√ |
|||
