Views:

The following list contains the addresses and ports that should be whitelisted to allow access through the firewall:

  • ddi57-p.activeupdate.trendmicro.com:443
  • grid-global.trendmicro.com:443
  • ddaaas.trendmicro.com:443
  • ddi570-en-domaincensus.trendmicro.com:443
  • ddi570-en-census.trendmicro.com:443
  • licenseupdate.trendmicro.com:443
  • rest.mars.trendmicro.com:443
  • ddi57-en-f.trx.trendmicro.com:443
  • intelliconnect.trendmicro.com:443
  • ddi57-retroscan.trendmicro.com:443
  • ddi570-en.fbs25.trendmicro.com:80
  • ddi57-threatconnect.trendmicro.com:443
  • ddi5-7-en-wis.trendmicro.com:443
  • ddi5-7-en.url.trendmicro.com:443
  • ddi5-7-en-t0.url.trendmicro.com:443

If you are using the vDDI and have enabled the Deep Discovery Analyzer as a Service Add-on (A hosted service that analyze possible threats), the following addresses should also be added:

  • api.ddcloud.trendmicro.com:443
  • api.us-east-1.en.ddcloud.trendmicro.com:443
  • api.eu-central-1.eu.ddcloud.trendmicro.com:443

If DDI integrates with Deep Discovery Director-Network Analytics as a Service, the following addresses should also be added:

  • With Deep Discovery Director On-Prem

    • api.nacloud.trendmicro.com:443
    • api.us.nacloud.trendmicro.com:443
    • api.eu.nacloud.trendmicro.com:443
    • api.sg.nacloud.trendmicro.com:443
    • api.jp.nacloud.trendmicro.com:443
  • With Deep Discovery Director Cloud

    • api.us.xdr.nacloud.trendmicro.com:443
    • api.eu.xdr.nacloud.trendmicro.com:443
    • api.sg.xdr.nacloud.trendmicro.com:443
    • api.jp.xdr.nacloud.trendmicro.com:443

If DDI integrates with Deep Discovery Cloud version, the following addresses should also be added:

  • api-01.dddxdr.trendmicro.com:443

If DDI integrates with Trend Micro XDR, the following addresses should also be added:

  • xlogr-ue1.xdr.trendmicro.com:443
  • xlogr-ec1.xdr.trendmicro.com:443
  • xlogr-ane1.xdr.trendmicro.com:443
  • xlogr-ase1.xdr.trendmicro.com:443

It is highly recommended to test communications with Trend Micro backend services via the Network Service Diagnostics feature.

To run the Network Service Diagnostics, go to https://DDI_IP/html/troubleshooting.htm then click Network Service Diagnostics > Test.

For more service addresses and ports used by DDI 5.7, refer to Appendix D of the official Administration Guide.