Deep Security as a Service server URLs

If a firewall or AWS security group restricts outbound traffic from your network and you want to use Deep Security as a Service, you must configure the firewall to allow outbound traffic on port 443 (for HTTPS addresses) and port 80 (for HTTP addresses) to the following Deep Security as a Service server URLs:

  • https://relay.deepsecurity.trendmicro.com
  • https://app.deepsecurity.trendmicro.com
  • https://agents.deepsecurity.trendmicro.com
  • http://files.trendmicro.com/
  • http://dsmim.deepsecurity.trendmicro.com/
  • https://iaus.trendmicro.com/
  • ds10.icrc.trendmicro.com
  • https://iaus.activeupdate.trendmicro.com/
  • https://ds10.icrc.trendmicro.com/tmcss/?
  • https://ds10-jp.icrc.trendmicro.com/tmcss/?
  • https://ds10-sc.icrc.trendmicro.com.cn/tmcss/?
  • ds100-en.url.trendmicro.com
  • ds100-jp.url.trendmicro.com
  • ds100-sc.url.trendmicro.com
  • http://sitesafety.trendmicro.com
  • http://jp.sitesafety.trendmicro.com/
  • deepsecurity1000-en.fbs20.trendmicro.com 
  • deepsecurity1000-jp.fbs20.trendmicro.com
  • deepsecurity1000-sc.fbs20.trendmicro.com
  • ds1000-en.census.trendmicro.com
  • ds1000-jp.census.trendmicro.com
  • ds1000-sc.census.trendmicro.com
  • deepsec10-en.grid-gfr.trendmicro.com
  • deepsec10-jp.grid-gfr.trendmicro.com
  • deepsec10-cn.grid-gfr.trendmicro.com

Similarly, to support Deep Security Agent versions 9.5 and 9.6, you need to allow outbound traffic for the following URLs:

  • http://iaufdbk.trendmicro.com
  • http://ds95-en.url.trendmicro.com
  • http://ds95-jp.url.trendmicro.com
  • https://ds95.icrc.trendmicro.com
  • https://ds95-sc.icrc.trendmicro.com.cn
  • https://ds95-jp.icrc.trendmicro.com
  • http://ds96-en.url.trendmicro.com
  • http://ds96-jp.url.trendmicro.com
  • https://ds96.icrc.trendmicro.com
  • https://ds96-sc.icrc.trendmicro.com.cn
  • https://ds96-jp.icrc.trendmicro.com

For a list of the IP ranges that Deep Security as a Service requires outbound access to, see Deep Security as a Service IP addresses.