The following firewall exceptions apply to networks with a Service Gateway installed
and cloud service extension turned on.
 |
ImportantThe cloud service extension reduces firewall exceptions but causes network latency.
|
Endpoint Security Exceptions
|
Service / Agent
|
Region
|
Exceptions
|
|
Endpoint Sensor Agents
|
|
xlogr-ec1.xdr.trendmicro.com |
Zero Trust Secure Access Exceptions
|
Service
|
Region
|
Exceptions
|
|
Internet Access Service
|
|
auth.ztsa-iag.trendmicro.com |
|
United Kingdom
|
pac.uk.ztsa-iag.trendmicro.com auth.uk.ztsa-iag.trendmicro.com |
|
|
Internet Access Cloud Gateway
|
|
proxy.ztsa-iag.trendmicro.com |
|
proxy-uk.eu.ztsa-iag.trendmicro.com |
|
|
Internet Access On-Premises Gateway with Smart Protection Network: Off
|
|
xlogr-ec1.xdr.trendmicro.com api.eu-central-1.eu.ddcloud.trendmicro.com iwsh30-en.url.trendmicro.com api-eu-central-1.crs.trendmicro.com iwsh300-en.census.trendmicro.com iwsaas30-en-f.trx.trendmicro.com iwsh30-p.activeupdate.trendmicro.com |
|
Internet Access On-Premises Gateway with Smart Protection Network: On
|
|
xlogr-ec1.xdr.trendmicro.com api.eu-central-1.eu.ddcloud.trendmicro.com ctapi.trendmicro.com iwsh30-p.activeupdate.trendmicro.com |
|
Private Access Connector
|
|
agent-uk-rel.ztna.trendmicro.com download-uk2-rel.ztna.trendmicro.com saseztnaproduk2sagen2.blob.core.windows.net saseztnaproduk2sa.blob.core.windows.net sase-ztna-prod-uk2-iothub-cntevt.azure-devices.net |
|
ztnaextacr.azurecr.io 0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org |
|
|
Private Access Browser Access
|
United Kingdom
|
{Customer_Specified}.myapplications.uk2.ztna.trendmicro.com
{Customer_Specified}.edge.uk2.ztna.trendmicro.com
{Customer_Specified}.rdgw.uk2.ztna.trendmicro.com
|
|
Private Access Connector
(if not using the Trend Cloud Proxy service)
|
Australia
|
20.5.69.128/28 |
|
Europe
|
20.4.51.32/28 |
|
|
India
|
20.219.254.160/28 |
|
|
Israel
|
20.217.194.0/28 |
|
|
Japan
|
52.140.246.128/28 |
|
|
Singapore
|
52.187.118.64/28 |
|
|
United States
|
20.7.52.240/28 |
|
|
Brazil
|
4.228.193.144/28 |
|
|
MEA
|
20.74.229.224/28 |
|
|
United Kingdom
|
20.0.229.192/28 |
|
|
Canada
|
40.82.166.0/28 |
Service Gateway Exceptions
|
Service
|
Region
|
Exceptions
|
|
Firmware
|
|
sgi-tunneling.uk.xdr.trendmicro.com sgi-iot.uk.xdr.trendmicro.com api.uk.xdr.trendmicro.com upload.uk.xdr.trendmicro.com |
|
Smart Protection Network proxy: On
|
|
ctapi.trendmicro.com |
|
Smart Protection Network proxy: Off
|
|
sg-tmsps10-en.url.trendmicro.com sg-tmsps10-en-wis.trendmicro.com sg-tmsps100-en-census.trendmicro.com sg-tmsps100-en-domaincensus.trendmicro.com grid-global.trendmicro.com rest.mars.trendmicro.com sg-tmsps10-en.gfrbridge.trendmicro.com sg-tmsps10-p.activeupdate.trendmicro.com |
|
Local ActiveUpdate
|
|
Refer to ActiveUpdate session of each product/agent
|