Views:

Generally, the following URLs are used:

  • *.iws-hybrid.trendmicro.com
  • *.url.trendmicro.com
  • *.fbs20.trendmicro.com
  • *.census.trendmicro.com
  • *.trx.trendmicro.com
  • *.activeupdate.trendmicro.com
  • *.icrc.trendmicro.com
  • *.crs.trendmicro.com
  • *.cloudfront.net

See: Task Overview For New Customers

 
If you need specific ports to allow for these URLs, use port 80 and 443.

When using Direct Authentication mode, please refer to the second table in the following link for IP addresses that TMWS uses for proxy (inbound) and for Direct Authentication). You can also refer to the following: Static Proxy Servers and IP Addresses Used in Trend Micro Web Security.

PurposeIP AddressesDescription
For Proxy
(Inbound)
  • 52.29.191.208 - 52.29.191.223
  • 54.171.190.128 - 54.171.190.143
  • 52.56.127.240 - 52.56.127.247
  • 52.35.63.176 - 52.35.63.191
  • 52.90.127.240 - 52.90.127.255
  • 52.68.255.224 - 52.68.255.255
  • 52.65.255.240 - 52.65.255.255
  • 54.233.255.240 - 54.233.255.255
  • 13.126.23.128 - 13.126.23.135
  • 18.141.66.240 - 18.141.66.247
  • 13.244.176.40 - 13.244.176.47
The TMWS cloud proxy uses the IP address within these IP ranges to receive HTTP requests sent from a user's browser in your organization.
For Direct Authentication
  • 54.93.44.160
  • 54.93.40.172
  • 50.112.157.207
  • 54.201.83.195
  • 54.76.190.176
  • 54.72.187.231
  • 52.56.76.254
  • 52.56.96.164
  • 52.4.56.161
  • 52.0.26.116
  • 54.199.160.153
  • 54.250.181.139
  • 54.252.137.220
  • 54.79.89.127
  • 54.232.197.232
  • 54.207.109.120
  • 35.154.252.243
  • 35.154.70.163
  • 18.136.191.209
  • 52.220.233.54
  • 13.244.188.220
  • 13.244.164.245
If your organization uses the Direct authentication method, TMWS both on the cloud and on the premises uses one of these IP addresses to connect to your Active Directory servers for user authentication.
Comments (0)