The following firewall exceptions apply to networks with a Service Gateway installed
and cloud service extension turned on. For more information, see cloud service extension.
 |
ImportantThe cloud service extension reduces firewall exceptions but causes network latency.
|
Endpoint Security Exceptions
|
Service / Agent
|
Region
|
Exceptions
|
|
Endpoint Sensor Agents
|
|
api-ca.xbc.trendmicro.com errs-ca.mgcp.trendmicro.com er-ws-ca.xdr.trendmicro.com |
Zero Trust Secure Access Exceptions
|
Service
|
Region
|
Exceptions
|
|
Access Module
|
|
prod.ztsaagent.trendmicro.com upload.xdr.trendmicro.com event-us.ztsaagent.trendmicro.com |
|
Authentication
|
|
agent-us-rel.ztna.trendmicro.com signin.v1.trendmicro.com tm.login.trendmicro.com iamservice.trendmicro.com Other custom IDP services Google reCAPTCHA:
www.gstatic.com fonts.gstatic.com Plus one of the following: www.google.com (recommended) www.recaptcha.net |
|
Internet Access Service
|
|
auth.ztsa-iag.trendmicro.com pac.ca.ztsa-iag.trendmicro.com auth.ca.ztsa-iag.trendmicro.com |
|
Internet Access Cloud Gateway
|
|
proxy.ztsa-iag.trendmicro.com proxy.ca.ztsa-iag.trendmicro.com |
|
Internet Access On-Premises Gateway with Smart Protection Network Proxy: Off
|
|
xlogr-ue1.xdr.trendmicro.com api.us-east-1.en.ddcloud.trendmicro.com iwsh30-en.url.trendmicro.com api.crs.trendmicro.com iwsh300-en.census.trendmicro.com iwsaas30-en-f.trx.trendmicro.com iwsh30-p.activeupdate.trendmicro.com |
|
Internet Access On-Premises Gateway with Smart Protection Network Proxy: On
|
|
xlogr-ue1.xdr.trendmicro.com api.us-east-1.en.ddcloud.trendmicro.com ctapi.trendmicro.com iwsh30-p.activeupdate.trendmicro.com |
|
Private Access Connector
|
Australia
|
20.5.69.128/28 |
|
Europe
|
20.4.51.32/28 |
|
|
India
|
20.219.254.160/28 |
|
|
Israel
|
20.217.194.0/28 |
|
|
Japan
|
52.140.246.128/28 |
|
|
Singapore
|
52.187.118.64/28 |
|
|
United States
|
20.7.52.240/28 |
|
|
Brazil
|
4.228.193.144/28 |
|
|
Colombia
|
158.247.121.198 149.130.166.153 |
|
|
MEA
|
20.74.229.224/28 |
|
|
United Kingdom
|
20.0.229.192/28 |
|
|
Canada
|
40.82.166.0/28 |
Service Gateway Exceptions
|
Service
|
Region
|
Exceptions
|
|
Firmware
|
|
sgi-tunneling.ca.xdr.trendmicro.com sgi-iot.ca.xdr.trendmicro.com api.ca.xdr.trendmicro.com upload..ca.xdr.trendmicro.com |
|
Smart Protection Network proxy: On
|
|
ctapi.trendmicro.com |
|
Smart Protection Network proxy: Off
|
|
sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com grid-global.trendmicro.com rest.mars.trendmicro.com sg-tmsps10-en.gfrbridge.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com |
|
Local ActiveUpdate
|
|
Refer to ActiveUpdate session of each product/agent
|
Network Inventory
|
Service
|
Region
|
Exceptions
|
|
Virtual Network Sensor
|
Canada
|
Refer to the Virtual Network Sensor exceptions in Firewall exceptions: Canada - all exceptions |
|
Deep Discovery Inspector
|
Canada
|
Refer to the Deep Discovery Inspector exceptions in Firewall exceptions: Canada - all exceptions |