次のファイアウォールの例外は、次のネットワークに適用されます。
-
Service Gatewayがインストールされ、クラウドサービス拡張機能がオフになっています
-
Service Gatewayがインストールされていません
TrendAI Vision One™ 例外
|
サービス/エージェント
|
地域
|
除外
|
|
認証
|
|
signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA:
www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net |
Endpoint Securityの除外設定
|
サービス/エージェント
|
地域
|
除外
|
||
|
Endpoint Sensorの機能
|
|
assessment-mea.mgcp.trendmicro.com release-us1.mgcp.trendmicro.com cti-us1.mgcp.trendmicro.com api-mea.xbc.trendmicro.com tgw-mea.mgcp.trendmicro.com support-connector-api.manage.trendmicro.com supportconnectorpacks.manage.trendmicro.com rpcollectedthings.manage.trendmicro.com cloudendpoint-mea.mgcp.trendmicro.com er-ws-mea.xdr.trendmicro.com era-mea.xdr.trendmicro.com endpointpolicy-cdn-mea.xbc.trendmicro.com files.trendmicro.com xlogr-mea.xdr.trendmicro.com api.mea.xdr.trendmicro.com api-cert.mea.xdr.trendmicro.com upload.mea.xdr.trendmicro.com wsc-mea.xbc.trendmicro.com files.trendmicro.com ipv6-iaus.trendmicro.com ipv6-iaus.activeupdate.trendmicro.com iaus.activeupdate.trendmicro.com iaus.trendmicro.com |
||
|
ブラウザ機能拡張
|
|
clients2.google.com/service/update2/crx edge.microsoft.com/extensionwebstorebase/v1/crx |
||
|
Standard Endpoint Protection 機能
|
|
<Apex One console_DNS>.manage.trendmicro.com licenseupdate.trendmicro.com asm01-nabu-prod.aot.trendmicro.com api-nabu.aot.trendmicro.com osce14-p.activeupdate.trendmicro.com tmsm35-p.activeupdate.trendmicro.com activeupdate.trendmicro.com osce14.icrc.trendmicro.com osce14-0-en.url.trendmicro.com osce140-en.fbs25.trendmicro.com osce14-en.gfrbridge.trendmicro.com osce14-en-census.trendmicro.com osce14bak-en-census.trendmicro.com osce140-en-f.trx.trendmicro.com oscecmp140-en-f.trx.trendmicro.com osce140-en-b.trx.trendmicro.com mcs.trendmicro.com www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/ files.trendmicro.com aurd-test2.activeupdate.trendmicro.com support-connector-api.manage.trendmicro.com support-connector-service.manage.trendmicro.com supportconnectorpacks.manage.trendmicro.com rpcollectedthings.blob.core.windows.net macOSエージェント:
tmsm35.icrc.trendmicro.com/ss tmsm3-5-cs.url.trendmicro.com tmsm3-5-de.url.trendmicro.com tmsm3-5-en.url.trendmicro.com tmsm3-5-es.url.trendmicro.com tmsm3-5-fr.url.trendmicro.com tmsm3-5-it.url.trendmicro.com tmsm3-5-pl.url.trendmicro.com tmsm3-5-tc.url.trendmicro.com tmsm35-cs.gfrbridge.trendmicro.com tmsm35-de.gfrbridge.trendmicro.com tmsm35-en.gfrbridge.trendmicro.com tmsm35-es.gfrbridge.trendmicro.com tmsm35-fr.gfrbridge.trendmicro.com tmsm35-it.gfrbridge.trendmicro.com tmsm35-pl.gfrbridge.trendmicro.com tmsm35-tc.gfrbridge.trendmicro.com tmsm350-cs.fbs25.trendmicro.com tmsm350-de.fbs25.trendmicro.com tmsm350-en.fbs25.trendmicro.com tmsm350-es.fbs25.trendmicro.com tmsm350-fr.fbs25.trendmicro.com tmsm350-it.fbs25.trendmicro.com tmsm350-pl.fbs25.trendmicro.com tmsm350-tc.fbs25.trendmicro.com |
||
|
Server & Workload Protection 機能
|
|
workload.ae-1.cloudone.trendmicro.com agents.workload.ae-1.cloudone.trendmicro.com <agents-001 through agents-010>.workload.ae-1.cloudone.trendmicro.com agent-comm.workload.ae-1.cloudone.trendmicro.com dsmim.workload.ae-1.cloudone.trendmicro.com relay.workload.ae-1.cloudone.trendmicro.com xdr-resp-ioc.workload.ae-1.cloudone.trendmicro.com files.trendmicro.com iaus.activeupdate.trendmicro.com iaus.trendmicro.com ipv6-iaus.trendmicro.com ipv6-iaus.activeupdate.trendmicro.com dsaas1100-en-census.trendmicro.com ds200-en.fbs25.trendmicro.com ds200-jp.fbs25.trendmicro.com dsaas.icrc.trendmicro.com dsaas-en-f.trx.trendmicro.com dsaas-en-b.trx.trendmicro.com deepsecaas11-en.gfrbridge.trendmicro.com dsaas.url.trendmicro.com gateway.workload.ae-1.cloudone.trendmicro.com gateway-control.workload.ae-1.cloudone.trendmicro.com relay.deepsecurity.trendmicro.com ファイアウォールEIPブロック:
workload.ae-1.cloudone.trendmicro.com (40.172.62.0/27, 18.96.96.128/27) agents.workload.ae-1.cloudone.trendmicro.com (40.172.62.0/27, 18.96.96.128/27) relay.workload.ae-1.cloudone.trendmicro.com (40.172.62.0/27, 18.96.96.128/27) dsmim.workload.ae-1.cloudone.trendmicro.com (40.172.62.0/27, 18.96.96.128/27) <agents-001 through agents-010>.workload.ae-1.cloudone.trendmicro.com (40.172.62.0/27, 18.96.96.128/27) |
[Zero Trust Secure Access Exceptions]
 |
重要Endpoint Sensor Agentの例外も指定する必要があります。これらの例外はEndpoint Sensor Agentにあります。
|
|
サービス/エージェント
|
地域
|
除外
|
|
認証
|
|
agent-mea-rel.ztna.trendmicro.com signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA:
www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net |
|
Internet Access Service
|
|
auth.ztsa-iag.trendmicro.com |
|
pac.mea.ztsa-iag.trendmicro.com auth.mea.ztsa-iag.trendmicro.com |
|
|
インターネットアクセスクラウドゲートウェイ
|
|
proxy.ztsa-iag.trendmicro.com |
|
proxy.mea.ztsa-iag.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
インターネットアクセスオンプレミスゲートウェイSPNプロキシ: オフ
|
|
xlogr-mea.xdr.trendmicro.com |
|
api.me-central-1.uae.ddcloud.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
iwsh30-en.url.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
api-eu-central-1.crs.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
iwsh300-en.census.trendmicro.com iwsaas30-en-f.trx.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
iwsh30-p.activeupdate.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
インターネットアクセスオンプレミスゲートウェイ (SPNプロキシ使用): オン
|
|
xlogr-mea.xdr.trendmicro.com |
|
api.me-central-1.uae.ddcloud.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
ctapi.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
ctapi.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
ctapi.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
|
iwsh30-p.activeupdate.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
Service Gateway除外
|
サービス
|
地域
|
除外
|
|
ファームウェア
|
|
sgi-tunneling.me.xdr.trendmicro.com sgi-iot.me.xdr.trendmicro.com api.mea.xdr.trendmicro.com upload.mea.xdr.trendmicro.com |
|
Smart Protection Networkプロキシ: オン
|
|
ctapi.trendmicro.com |
|
Smart Protection Networkプロキシ: オフ
|
|
sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com grid-global.trendmicro.com rest.mars.trendmicro.com sg-tmsps10-en.gfrbridge.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com |
|
Local ActiveUpdate
|
|
各製品/エージェントのActiveUpdateセッションを参照してください
|
Forensics and Analysis
|
サービス/エージェント
|
地域
|
除外
|
|
Agent用IRツールのダウンロード
|
|
resources.prod-me-central-1.irs.trendmicro.com |
Network Inventory
|
サービス/エージェント
|
地域
|
除外
|
||
|
Virtual Network Sensor
|
中東、アフリカ地域
|
xns-p.activeupdate.trendmicro.com gp.fbs.trendmicro.com xlogr-mea.xdr.trendmicro.com api.mea.xdr.trendmicro.com licenseupdate.trendmicro.com 「Send to Sandbox」が有効になっているお客様には、次の内容も追加してください。
ctapi.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com |
||
|
Deep Discovery Inspector バージョン6.8サービスパック1 / 6.8サービスパック2
|
中東、アフリカ地域
|
api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.trendmicro.com ctapi.trendmicro.com ddaaas.trendmicro.com ddi681.retroscan.trendmicro.com ddi68-p.activeupdate.trendmicro.com/activeupdate gp.fbs.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com xlogr-mea.xdr.trendmicro.com
|
||
|
Deep Discovery Inspectorバージョン6.8
|
中東、アフリカ地域
|
api-ni-mea.xdr.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.nacloud.trendmicro.com api.mea.xdr.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-mea.xdr.trendmicro.com ddi68-en-f.trx.trendmicro.com ddi68-p.activeupdate.trendmicro.com/activeupdate ddi68.retroscan.trendmicro.com ddi6-8-en-t0.url.trendmicro.com ddi6-8-en-wis.trendmicro.com ddi6-8-en.url.trendmicro.com ddi680-en-census.trendmicro.com ddi680-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector バージョン6.7 / 6.7サービスパック1
|
中東、アフリカ地域
|
api-ni-mea.xdr.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.nacloud.trendmicro.com api.mea.xdr.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-mea.xdr.trendmicro.com ddi67-en-f.trx.trendmicro.com ddi67-p.activeupdate.trendmicro.com/activeupdate ddi67.retroscan.trendmicro.com ddi6-7-en-t0.url.trendmicro.com ddi6-7-en-wis.trendmicro.com ddi6-7-en.url.trendmicro.com ddi670-en-census.trendmicro.com ddi670-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector version 6.6
|
中東、アフリカ地域
|
api-ni-mea.xdr.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-mea.xdr.trendmicro.com ddi66-en-f.trx.trendmicro.com ddi66-p.activeupdate.trendmicro.com/activeupdate ddi66.retroscan.trendmicro.com ddi6-6-en-t0.url.trendmicro.com ddi6-6-en-wis.trendmicro.com ddi6-6-en.url.trendmicro.com ddi660-en-census.trendmicro.com ddi660-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspectorバージョン6.5
|
中東、アフリカ地域
|
api-ni-mea.xdr.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-mea.xdr.trendmicro.com ddi65-en-f.trx.trendmicro.com ddi65-p.activeupdate.trendmicro.com/activeupdate ddi65.retroscan.trendmicro.com ddi6-5-en-t0.url.trendmicro.com ddi6-5-en-wis.trendmicro.com ddi6-5-en.url.trendmicro.com ddi650-en-census.trendmicro.com ddi650-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspectorバージョン6.2
|
中東、アフリカ地域
|
api-ni-mea.xdr.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-mea.xdr.trendmicro.com ddi62-en-f.trx.trendmicro.com ddi62-p.activeupdate.trendmicro.com/activeupdate ddi62.retroscan.trendmicro.com ddi6-2-en-t0.url.trendmicro.com ddi6-2-en-wis.trendmicro.com ddi6-2-en.url.trendmicro.com ddi620-en-census.trendmicro.com ddi620-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector version 6.0
|
中東、アフリカ地域
|
api-ni-mea.xdr.trendmicro.com api.ddcloud.trendmicro.com api.uae.ddcloud.trendmicro.com api.mea.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-mea.xdr.trendmicro.com ddi60-en-f.trx.trendmicro.com ddi60-p.activeupdate.trendmicro.com/activeupdate ddi60.retroscan.trendmicro.com ddi6-0-en-t0.url.trendmicro.com ddi6-0-en-wis.trendmicro.com ddi6-0-en.url.trendmicro.com ddi600-en-census.trendmicro.com ddi600-en-domaincensus.trendmicro.com
|
TrendAI Vision One™ Container Security
|
サービス
|
地域
|
除外
|
|
Mandatory for Container Security
|
UAE
|
api.mea.xdr.trendmicro.com vcs-storage-mea.xdr.trendmicro.com |
|
Artifact Scanner
|
UAE
|
api.mea.xdr.trendmicro.com ast-upload-mea.xdr.trendmicro.com ast-report-mea.xdr.trendmicro.com ast-cli.xdr.trendmicro.com antimalware.ae-1.cloudone.trendmicro.com antimalware-ae1.xdr.trendmicro.com |
|
ランタイムセキュリティ
|
アラブ首長国連邦
|
api.mea.xdr.trendmicro.com vcs-iot-mea.xdr.trendmicro.com vcs-storage-mea.xdr.trendmicro.com |
|
実行時不正プログラムスキャン
|
UAE
|
activeupdate.trendmicro.com |
|
デフォルトコンテナイメージアクセス
|
UAE
|
public.ecr.aws *.cloudfront.net |
Security Awarenessの例外
|
サービス
|
地域
|
除外
|
|
Security Awareness
|
すべて
|
cdn.tiny.cloud |
Cloud Risk Management
|
サービス
|
リージョン
|
除外
|
|
リアルタイム状態監視
|
すべて
|
rtpm.apm-mea.xdr.trendmicro.com a2sx2v445s9fxl-ats.iot.me-central-1.amazonaws.com |
Android用モバイルセキュリティ
|
サーバ
|
地域
|
ポート
|
除外
|
|
TrendMicro Mobile Securityバックエンド
|
すべて
|
|
*.mobile.trendmicro.com *.xdr.trendmicro.com https://portal.mobile.trendmicro.com/ui/ami/mobile/h5/worryfree/openAndroidApp.html?productCode=wfbss&authCode=HWQj7aab&userPrincipalName= rest.mars.trendmicro.com rest-g.mars.trendmicro.com rest-g-au.mars.trendmicro.com mint.mars.trendmicro.com portal-sg.mobile.trendmicro.com *.ztna.trendmicro.com *.ztsa-iag.trendmicro.com logs.trendmicro.com spnsupport.trendmicro.com mxdr1-0.url.trendmicro.com mxdr1-0-im.url.trendmicro.com http://*.trendmicro.com https://*.trendmicro.com |
|
GooglePlay / Firebaseサーバ
|
すべて
|
|
*.google.com *.firebase.com *.googleapis.com *.firebaseio.com |
|
フィードバックを記録
|
すべて
|
|
https://cognito-identity.us-west-2.amazonaws.com |
Trend Micro Security for iOS
|
サーバ
|
地域
|
ポート
|
除外
|
|
TrendMicro Mobile Securityバックエンド
|
すべて
|
|
*.trendmicro.com *.mobile.trendmicro.com *.xdr.trendmicro.com rest.mars.trendmicro.com rest-g.mars.trendmicro.com rest-g-au.mars.trendmicro.com mint.mars.trendmicro.com portal-sg.mobile.trendmicro.com *.ztna.trendmicro.com *.ztsa-iag.trendmicro.com logs.trendmicro.com spnsupport.trendmicro.com mxdr1-0.url.trendmicro.com mxdr1-0-im.url.trendmicro.com mxdr1-0-ios.url.trendmicro.com http://*.trendmicro.com https://*.trendmicro.com |
|
Appleサーバ
|
すべて
|
|
*.apple.com *.mzstatic.com *.icloud.com |
|
Firebaseサーバ
|
すべて
|
|
*.google.com *.firebase.com *.googleapis.com *.firebaseio.com |
|
フィードバックを記録
|
すべて
|
|
https://cognito-identity.us-west-2.amazonaws.com |
TrendAI Vision One™ エージェントレスの脆弱性と脅威の検出の例外
| サービス | リージョン | 除外 |
|
エージェントレスによる脆弱性と脅威の検出
|
アラブ首長国連邦
|
googlecode.l.googleusercontent.com sentry.ae-1.cloudone.trendmicro.com xlogr-mea.xdr.trendmicro.com |
|
サービス/エージェント
|
地域
|
除外
|
|
ログ受信者
|
すべて
|
xlogr-mea.xdr.trendmicro.com |
|
Sandbox Analysis
|
すべて
|
api.me-central-1.uae.ddcloud.trendmicro.com |
|
Webレピュテーションサービス
|
すべて
|
iwsh30-en.url.trendmicro.com |
|
クラウドレピュテーションサービス
|
すべて
|
api-eu-central-1.crs.trendmicro.com |
|
機械学習型検索
|
すべて
|
iwsh300-en.census.trendmicro.com iwsaas30-en-f.trx.trendmicro.com |
|
トレンドマイクロのアップデートサーバ
|
すべて
|
iwsh30-p.activeupdate.trendmicro.com |
|
Executive Dashboard
|
すべて
|
download.xdr.trendmicro.com |
LaunchDarklyの例外
|
サービス
|
地域
|
除外
|
|
LaunchDarkly
|
|
必要なLaunchDarklyドメインの完全なリストについては、LaunchDarklyドメインリストを参照してください。
|