This article lists the different addresses and ports of the backend services used by Deep Discovery Inspector (DDI) 5.7 that should have the "Allow" rule on firewall.
The following list contains the addresses and ports that should be whitelisted to allow access through the firewall:
- ddi57-p.activeupdate.trendmicro.com:443
- grid-global.trendmicro.com:443
- ddaaas.trendmicro.com:443
- ddi570-en-domaincensus.trendmicro.com:443
- ddi570-en-census.trendmicro.com:443
- licenseupdate.trendmicro.com:443
- rest.mars.trendmicro.com:443
- ddi57-en-f.trx.trendmicro.com:443
- intelliconnect.trendmicro.com:443
- ddi57-retroscan.trendmicro.com:443
- ddi570-en.fbs25.trendmicro.com:80
- ddi57-threatconnect.trendmicro.com:443
- ddi5-7-en-wis.trendmicro.com:443
- ddi5-7-en.url.trendmicro.com:443
- ddi5-7-en-t0.url.trendmicro.com:443
If you are using the vDDI and have enabled the Deep Discovery Analyzer as a Service Add-on (A hosted service that analyze possible threats), the following addresses should also be added:
- api.ddcloud.trendmicro.com:443
- api.us-east-1.en.ddcloud.trendmicro.com:443
- api.eu-central-1.eu.ddcloud.trendmicro.com:443
If DDI integrates with Deep Discovery Director-Network Analytics as a Service, the following addresses should also be added:
-
With Deep Discovery Director On-Prem
- api.nacloud.trendmicro.com:443
- api.us.nacloud.trendmicro.com:443
- api.eu.nacloud.trendmicro.com:443
- api.sg.nacloud.trendmicro.com:443
- api.jp.nacloud.trendmicro.com:443
-
With Deep Discovery Director Cloud
- api.us.xdr.nacloud.trendmicro.com:443
- api.eu.xdr.nacloud.trendmicro.com:443
- api.sg.xdr.nacloud.trendmicro.com:443
- api.jp.xdr.nacloud.trendmicro.com:443
If DDI integrates with Deep Discovery Cloud version, the following addresses should also be added:
- api-01.dddxdr.trendmicro.com:443
If DDI integrates with Trend Micro XDR, the following addresses should also be added:
- xlogr-ue1.xdr.trendmicro.com:443
- xlogr-ec1.xdr.trendmicro.com:443
- xlogr-ane1.xdr.trendmicro.com:443
- xlogr-ase1.xdr.trendmicro.com:443
It is highly recommended to test communications with Trend Micro backend services via the Network Service Diagnostics feature.
To run the Network Service Diagnostics, go to https://DDI_IP/html/troubleshooting.htm then click Network Service Diagnostics > Test.
For more service addresses and ports used by DDI 5.7, refer to Appendix D of the official Administration Guide.
