Akamai provides localized cache servers that are geographically located close to you. Since Akamai's server IP addresses changes depending on the country you are located and even under different network conditions, it is best to use the DNS name "trendmicro.georedirector.akadns.net" or "activeupdate.trendmicro.com.edgekey.net" as the basis for your firewall rule.
For example, you prefer an IP address and you are using Deep Security 12.5, you have to perform the following:
- Ping the primary update source of your Deep Security, e.g. Ping "ipv6-iaus.activeupdate.trendmicro.com".
You should then be redirected to "e19270.dscd.akamaiedge.net", our third-party content provider. - Change the last octet of the IP address you got to ".255".
This should give you the address block for your servers. This works best if they are connecting using a single ISP.
The resolved IP addresses can change depending on network traffic and whether the servers fail. Akamai compensates for this by modifying their DNS to point to a different server set. If that is the case, the procedure above should be repeated again and add the new server IPs to the list.
If an error occurs, please contact Trend Micro Technical Support.