以下防火牆例外適用於具有以下條件的網路：
-
服務閘道已安裝且雲端服務擴充已關閉
-
未安裝服務閘道
TrendAI Vision One™ 驗證
|
Service
|
地區
|
例外規則
|
|
TrendAI Vision One™
|
|
signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA：
www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net |
端點安全例外
|
服務 / 代理
|
地區
|
例外規則
|
||
|
Endpoint Sensor 功能
|
|
assessment-eu1.mgcp.trendmicro.com release-us1.mgcp.trendmicro.com api-eu1.xbc.trendmicro.com tgw-eu1.mgcp.trendmicro.com support-connector-api.manage.trendmicro.com supportconnectorpacks.manage.trendmicro.com rpcollectedthings.manage.trendmicro.com cloudendpoint-eu1.mgcp.trendmicro.com er-ws-ec1.xdr.trendmicro.com era-ec1.xdr.trendmicro.com endpointpolicy-cdn-eu1.xbc.trendmicro.com files.trendmicro.com xlogr-ec1.xdr.trendmicro.com api.eu.xdr.trendmicro.com api-cert.eu.xdr.trendmicro.com upload.eu.xdr.trendmicro.com wsc-eu1.xbc.trendmicro.com api-ap3.xbc.trendmicro.com cdn-api-ap3.xbc.trendmicro.com files.trendmicro.com ipv6-iaus.trendmicro.com ipv6-iaus.activeupdate.trendmicro.com iaus.activeupdate.trendmicro.com iaus.trendmicro.com |
||
|
瀏覽器延伸
|
|
clients2.google.com/service/update2/crx edge.microsoft.com/extensionwebstorebase/v1/crx |
||
|
Sandbox Analysis
|
|
sandbox-threatconnect.trendmicro.com |
||
|
Standard Endpoint Protection 功能
|
|
<Apex One console_DNS>.manage.trendmicro.com licenseupdate.trendmicro.com asm01-emea-prod.aot.trendmicro.com api-emea.aot.trendmicro.com osce14-p.activeupdate.trendmicro.com tmsm35-p.activeupdate.trendmicro.com activeupdate.trendmicro.com osce14.icrc.trendmicro.com osce14-0-en.url.trendmicro.com osce140-en.fbs25.trendmicro.com osce14-en.gfrbridge.trendmicro.com osce14-en-census.trendmicro.com osce14bak-en-census.trendmicro.com osce140-en-f.trx.trendmicro.com oscecmp140-en-f.trx.trendmicro.com osce140-en-b.trx.trendmicro.com mcs.trendmicro.com www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/ files.trendmicro.com aurd-test2.activeupdate.trendmicro.com support-connector-api.manage.trendmicro.com support-connector-service.manage.trendmicro.com supportconnectorpacks.manage.trendmicro.com rpcollectedthings.blob.core.windows.net aurd-test2.activeupdate.trendmicro.com support-connector-api.manage.trendmicro.com support-connector-service.manage.trendmicro.com supportconnectorpacks.manage.trendmicro.com rpcollectedthings.blob.core.windows.net macOS 代理：
tmsm35.icrc.trendmicro.com/ss tmsm3-5-cs.url.trendmicro.com tmsm3-5-de.url.trendmicro.com tmsm3-5-en.url.trendmicro.com tmsm3-5-es.url.trendmicro.com tmsm3-5-fr.url.trendmicro.com tmsm3-5-it.url.trendmicro.com tmsm3-5-pl.url.trendmicro.com tmsm3-5-tc.url.trendmicro.com tmsm35-cs.gfrbridge.trendmicro.com tmsm35-de.gfrbridge.trendmicro.com tmsm35-en.gfrbridge.trendmicro.com tmsm35-es.gfrbridge.trendmicro.com tmsm35-fr.gfrbridge.trendmicro.com tmsm35-it.gfrbridge.trendmicro.com tmsm35-pl.gfrbridge.trendmicro.com tmsm35-tc.gfrbridge.trendmicro.com tmsm350-cs.fbs25.trendmicro.com tmsm350-de.fbs25.trendmicro.com tmsm350-en.fbs25.trendmicro.com tmsm350-es.fbs25.trendmicro.com tmsm350-fr.fbs25.trendmicro.com tmsm350-it.fbs25.trendmicro.com tmsm350-pl.fbs25.trendmicro.com tmsm350-tc.fbs25.trendmicro.com |
||
|
Server & Workload Protection 功能
|
|
files.trendmicro.com iaus.activeupdate.trendmicro.com iaus.trendmicro.com ipv6-iaus.trendmicro.com ipv6-iaus.activeupdate.trendmicro.com dsaas1100-en-census.trendmicro.com ds200-en.fbs25.trendmicro.com ds200-jp.fbs25.trendmicro.com dsaas.icrc.trendmicro.com dsaas-en-f.trx.trendmicro.com dsaas-en-b.trx.trendmicro.com deepsecaas11-en.gfrbridge.trendmicro.com dsaas.url.trendmicro.com relay.deepsecurity.trendmicro.com |
||
|
除了「所有地區」例外：
workload.de-1.cloudone.trendmicro.com agents.workload.de-1.cloudone.trendmicro.com <agents-001 through agents-010>.workload.de-1.cloudone.trendmicro.com agent-comm.workload.de-1.cloudone.trendmicro.com dsmim.workload.de-1.cloudone.trendmicro.com relay.workload.de-1.cloudone.trendmicro.com xdr-resp-ioc.workload.de-1.cloudone.trendmicro.com gateway.workload.de-1.cloudone.trendmicro.com gateway-control.workload.de-1.cloudone.trendmicro.com 防火牆 EIP 封鎖:
workload.de-1.cloudone.trendmicro.com (3.69.198.64/27, 18.96.34.160/27) agents.workload.de-1.cloudone.trendmicro.com (3.69.198.64/27, 18.96.34.160/27) relay.workload.de-1.cloudone.trendmicro.com (3.69.198.64/27, 18.96.34.160/27) dsmim.workload.de-1.cloudone.trendmicro.com (3.69.198.64/27, 18.96.34.160/27) <agents-001 through agents-010>.workload.gb-1.cloudone.trendmicro.com (3.69.198.64/27, 18.96.34.160/27) |
|||
|
除了「所有地區」例外：
workload.gb-1.cloudone.trendmicro.com agents.workload.gb-1.cloudone.trendmicro.com <agents-001 through agents-010>.workload.gb-1.cloudone.trendmicro.com agent-comm.workload.gb-1.cloudone.trendmicro.com dsmim.workload.gb-1.cloudone.trendmicro.com relay.workload.gb-1.cloudone.trendmicro.com xdr-resp-ioc.workload.gb-1.cloudone.trendmicro.com gateway.workload.gb-1.cloudone.trendmicro.com gateway-control.workload.gb-1.cloudone.trendmicro.com relay.deepsecurity.trendmicro.com 防火牆 EIP 封鎖:
workload.gb-1.cloudone.trendmicro.com (18.169.230.160/27, 18.98.162.128/27) agents.workload.gb-1.cloudone.trendmicro.com (18.169.230.160/27, 18.98.162.128/27) relay.workload.gb-1.cloudone.trendmicro.com (18.169.230.160/27, 18.98.162.128/27) dsmim.workload.gb-1.cloudone.trendmicro.com (18.169.230.160/27, 18.98.162.128/27) <agents-001 through agents-010>.workload.gb-1.cloudone.trendmicro.com (18.169.230.160/27, 18.98.162.128/27) |
Zero Trust Secure Access Exceptions
 |
重要您還必須為 Endpoint Sensor 代理指定例外。這些例外可以在 Endpoint Sensor Agents 中找到。
|
|
Service
|
地區
|
例外規則
|
|
存取模組
|
|
prod.ztsaagent.trendmicro.com upload.eu.xdr.trendmicro.com event-eu.ztsaagent.trendmicro.com |
|
驗證
|
|
agent-eu-rel.ztna.trendmicro.com signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA：
www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net |
|
網路存取服務
|
|
auth.ztsa-iag.trendmicro.com pac.eu.ztsa-iag.trendmicro.com auth.eu.ztsa-iag.trendmicro.com |
|
網路存取雲端閘道
|
|
proxy.ztsa-iag.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
proxy.eu.ztsa-iag.trendmicro.com |
|
|
proxy-uk.eu.ztsa-iag.trendmicro.com |
|
|
proxy-fr.eu.ztsa-iag.trendmicro.com |
|
|
proxy-it.eu.ztsa-iag.trendmicro.com |
|
|
荷蘭
|
proxy-nl.eu.ztsa-iag.trendmicro.com |
|
|
proxy-sa.eu.ztsa-iag.trendmicro.com |
|
|
proxy-me.eu.ztsa-iag.trendmicro.com |
|
|
proxy-il.eu.ztsa-iag.trendmicro.com |
|
|
內部網路存取閘道與主動式雲端截毒技術：關閉
|
|
xlogr-ec1.xdr.trendmicro.com api.eu-central-1.eu.ddcloud.trendmicro.com iwsh30-en.url.trendmicro.com api-eu-central-1.crs.trendmicro.com iwsh300-en.census.trendmicro.com iwsaas30-en-f.trx.trendmicro.com iwsh30-p.activeupdate.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
內部網路存取閘道與主動式雲端截毒技術：開啟
|
|
xlogr-ec1.xdr.trendmicro.com api.eu-central-1.eu.ddcloud.trendmicro.com ctapi.trendmicro.com iwsh30-p.activeupdate.trendmicro.com d9vbqsel5dvrs.cloudfront.net |
|
私密存取連接器
|
|
agent-eu-rel.ztna.trendmicro.com saseztnaprodeusagen2.blob.core.windows.net saseztnaprodeusa.blob.core.windows.net sase-ztna-prod-eu-iothub-cntevt.azure-devices.net speedtest.eu.ztna.trendmicro.com ztnaextacr.azurecr.io 0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org |
|
私密存取連接器
（如果未使用 Trend 雲端 Proxy 服務）
|
澳大利亞
|
20.5.69.128/28 |
|
歐洲
|
20.4.51.32/28 |
|
|
印度
|
20.219.254.160/28 |
|
|
以色列
|
20.217.194.0/28 |
|
|
日本
|
52.140.246.128/28 |
|
|
新加坡
|
52.187.118.64/28 |
|
|
美國
|
20.7.52.240/28 |
|
|
巴西
|
4.228.193.144/28 |
|
|
MEA
|
20.74.229.224/28 |
|
|
英國
|
20.0.229.192/28 |
|
|
加拿大
|
40.82.166.0/28 |
服務閘道例外
|
Service
|
地區
|
例外規則
|
|
韌體
|
|
sgi-tunneling.eu.xdr.trendmicro.com sgi-iot.eu.xdr.trendmicro.com api.eu.xdr.trendmicro.com upload.eu.xdr.trendmicro.com |
|
主動式雲端截毒技術 Proxy：開啟
|
|
ctapi.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com activeupdate.trendmicro.com |
|
主動式雲端截毒技術 Proxy：關閉
|
|
sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com grid-global.trendmicro.com rest.mars.trendmicro.com sg-tmsps10-en.gfrbridge.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com sg-tmsps10-en-backup.url.trendmicro.com activeupdate.trendmicro.com |
|
本機主動式更新
|
|
請參閱每個產品/代理的主動式更新會話
|
Forensics and Analysis
|
服務 / 代理
|
地區
|
例外
|
|
代理的IR工具下載
|
|
resources.prod-eu-central-1.irs.trendmicro.com |
TrendAI Vision One™ Container Security
|
Service
|
地區
|
例外規則
|
|
Container Security 的強制要求
|
|
api.eu.xdr.trendmicro.com vcs-storage-eu.xdr.trendmicro.com |
|
偵測器掃描
|
|
api.eu.xdr.trendmicro.com ast-upload-eu.xdr.trendmicro.com ast-report-eu.xdr.trendmicro.com ast-cli.xdr.trendmicro.com antimalware.de-1.cloudone.trendmicro.com antimalware-ec1.xdr.trendmicro.com |
|
執行時安全
|
|
api.eu.xdr.trendmicro.com vcs-iot-eu.xdr.trendmicro.com vcs-storage-eu.xdr.trendmicro.com |
|
即時惡意程式掃描
|
|
activeupdate.trendmicro.com |
|
預設容器映像存取
|
|
public.ecr.aws *.cloudfront.net |
TippingPoint 例外
|
服務
|
地區
|
例外
|
|
TippingPoint
|
澳大利亞
|
a1mmnfkx71i3sj-ats.iot.ap-southeast-2.amazonaws.com |
|
歐洲
|
a1mmnfkx71i3sj-ats.iot.eu-central-1.amazonaws.com |
|
|
印度
|
a1mmnfkx71i3sj-ats.iot.ap-south-1.amazonaws.com |
|
|
日本
|
a1mmnfkx71i3sj-ats.iot.ap-northeast-1.amazonaws.com |
|
|
新加坡
|
a1mmnfkx71i3sj-ats.iot.ap-southeast-1.amazonaws.com |
|
|
英國
|
a1mmnfkx71i3sj-ats.iot.eu-west-2.amazonaws.com |
|
|
美國
|
a1mmnfkx71i3sj-ats.iot.us-east-1.amazonaws.com |
網路清單
|
Service
|
地區
|
例外規則
|
||
|
虛擬網路感測器
|
歐洲
|
xns-p.activeupdate.trendmicro.com gp.fbs.trendmicro.com xlogr-ase2.xdr.trendmicro.com api.eu.xdr.trendmicro.com licenseupdate.trendmicro.com 對於已啟動「發送到沙盒」的客戶，還需添加以下內容：
ctapi.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com |
||
|
Deep Discovery Inspector 版本 6.8 Service Pack 1 / 6.8 Service Pack 2
|
歐洲
|
api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.trendmicro.com ctapi.trendmicro.com ddaaas.trendmicro.com ddi681.retroscan.trendmicro.com ddi68-p.activeupdate.trendmicro.com/activeupdate gp.fbs.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com xlogr-ase2.xdr.trendmicro.com
|
||
|
Deep Discovery Inspector 版本 6.8
|
歐洲
|
api-ni-eu.xdr.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.nacloud.trendmicro.com api.eu.xdr.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-ase2.xdr.trendmicro.com ddi68-en-f.trx.trendmicro.com ddi68-p.activeupdate.trendmicro.com/activeupdate ddi68.retroscan.trendmicro.com ddi6-8-en-t0.url.trendmicro.com ddi6-8-en-wis.trendmicro.com ddi6-8-en.url.trendmicro.com ddi680-en-census.trendmicro.com ddi680-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector 版本 6.7 / 6.7 Service Pack 1
|
歐洲
|
api-ni-eu.xdr.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.nacloud.trendmicro.com api.eu.xdr.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-ase2.xdr.trendmicro.com ddi67-en-f.trx.trendmicro.com ddi67-p.activeupdate.trendmicro.com/activeupdate ddi67.retroscan.trendmicro.com ddi6-7-en-t0.url.trendmicro.com ddi6-7-en-wis.trendmicro.com ddi6-7-en.url.trendmicro.com ddi670-en-census.trendmicro.com ddi670-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector 版本 6.6
|
歐洲
|
api-ni-eu.xdr.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-ase2.xdr.trendmicro.com ddi66-en-f.trx.trendmicro.com ddi66-p.activeupdate.trendmicro.com/activeupdate ddi66.retroscan.trendmicro.com ddi6-6-en-t0.url.trendmicro.com ddi6-6-en-wis.trendmicro.com ddi6-6-en.url.trendmicro.com ddi660-en-census.trendmicro.com ddi660-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector 版本 6.5
|
歐洲
|
api-ni-eu.xdr.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-ase2.xdr.trendmicro.com ddi65-en-f.trx.trendmicro.com ddi65-p.activeupdate.trendmicro.com/activeupdate ddi65.retroscan.trendmicro.com ddi6-5-en-t0.url.trendmicro.com ddi6-5-en-wis.trendmicro.com ddi6-5-en.url.trendmicro.com ddi650-en-census.trendmicro.com ddi650-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector 版本 6.2
|
歐洲
|
api-ni-eu.xdr.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-ase2.xdr.trendmicro.com ddi62-en-f.trx.trendmicro.com ddi62-p.activeupdate.trendmicro.com/activeupdate ddi62.retroscan.trendmicro.com ddi6-2-en-t0.url.trendmicro.com ddi6-2-en-wis.trendmicro.com ddi6-2-en.url.trendmicro.com ddi620-en-census.trendmicro.com ddi620-en-domaincensus.trendmicro.com
|
||
|
Deep Discovery Inspector 版本 6.0
|
歐洲
|
api-ni-eu.xdr.trendmicro.com api.ddcloud.trendmicro.com api.eu.ddcloud.trendmicro.com api.eu.xdr.nacloud.trendmicro.com ddaaas.trendmicro.com gp.fbs.trendmicro.com grid-global.trendmicro.com intelliconnect.trendmicro.com licenseupdate.trendmicro.com portal-01.dddxdr.trendmicro.com portal-02.dddxdr.trendmicro.com rest.mars.trendmicro.com xlogr-ase2.xdr.trendmicro.com ddi60-en-f.trx.trendmicro.com ddi60-p.activeupdate.trendmicro.com/activeupdate ddi60.retroscan.trendmicro.com ddi6-0-en-t0.url.trendmicro.com ddi6-0-en-wis.trendmicro.com ddi6-0-en.url.trendmicro.com ddi600-en-census.trendmicro.com ddi600-en-domaincensus.trendmicro.com
|
Android 行動安全
|
伺服器
|
區域
|
通訊埠
|
例外
|
|
TrendMicro Mobile Security 後端
|
全部
|
|
*.mobile.trendmicro.com *.xdr.trendmicro.com https://portal.mobile.trendmicro.com/ui/ami/mobile/h5/worryfree/openAndroidApp.html?productCode=wfbss&authCode=HWQj7aab&userPrincipalName= rest.mars.trendmicro.com rest-g.mars.trendmicro.com rest-g-au.mars.trendmicro.com mint.mars.trendmicro.com portal-sg.mobile.trendmicro.com *.ztna.trendmicro.com *.ztsa-iag.trendmicro.com logs.trendmicro.com spnsupport.trendmicro.com mxdr1-0.url.trendmicro.com mxdr1-0-im.url.trendmicro.com http://*.trendmicro.com https://*.trendmicro.com |
|
GooglePlay / Firebase 伺服器
|
全部
|
|
*.google.com *.firebase.com *.googleapis.com *.firebaseio.com |
|
記錄反饋
|
全部
|
|
https://cognito-identity.us-west-2.amazonaws.com |
趨勢科技行動安全防護（適用於 iOS）
|
伺服器
|
區域
|
通訊埠
|
例外
|
|
TrendMicro Mobile Security 後端
|
全部
|
|
*.trendmicro.com *.mobile.trendmicro.com *.xdr.trendmicro.com rest.mars.trendmicro.com rest-g.mars.trendmicro.com rest-g-au.mars.trendmicro.com mint.mars.trendmicro.com portal-sg.mobile.trendmicro.com *.ztna.trendmicro.com *.ztsa-iag.trendmicro.com logs.trendmicro.com spnsupport.trendmicro.com mxdr1-0.url.trendmicro.com mxdr1-0-im.url.trendmicro.com mxdr1-0-ios.url.trendmicro.com http://*.trendmicro.com https://*.trendmicro.com |
|
Apple 伺服器
|
全部
|
|
*.apple.com *.mzstatic.com *.icloud.com |
|
Firebase 伺服器
|
全部
|
|
*.google.com *.firebase.com *.googleapis.com *.firebaseio.com |
|
記錄反饋
|
全部
|
|
https://cognito-identity.us-west-2.amazonaws.com |
TrendAI Vision One™ 無代理弱點及安全威脅偵測例外
|
服務
|
區域
|
例外 |
|
無代理弱點與安全威脅偵測
|
歐洲
|
googlecode.l.googleusercontent.com sentry.de-1.cloudone.trendmicro.com xlogr-ec1.xdr.trendmicro.com |
Security Awareness 例外
|
服務
|
地區
|
例外
|
|
Security Awareness
|
全部
|
cdn.tiny.cloud |
雲端風險管理
|
服務
|
地區
|
例外
|
|
即時姿勢監控
|
歐洲
|
rtpm.apm-eu.xdr.trendmicro.com a2sx2v445s9fxl-ats.iot.eu-central-1.amazonaws.com |
Executive Dashboard
|
服務
|
地區
|
例外
|
|
XDR
|
全部
|
download.xdr.trendmicro.com |
LaunchDarkly 例外
|
服務
|
區域
|
例外
|
|
LaunchDarkly
|
|
如需完整的 LaunchDarkly 所需網域列表，請參閱 LaunchDarkly 網域列表。
|