概要
有些單位基於資安的考量，會透過建立安全的連線清單才能進行通訊。 作為提供雲端服務的Apex One™ as a Service十分依賴網路連線的方式去進行指令與控制管理，因此為了能讓Apex One™ as a Service正常運作，需要開放其經常使用到的DNS 名稱與IP位址進行通訊。
詳情
趨勢科技建議設定以下防火牆Outbound過濾規則，允許Apex One as a Service 使用的相關DNS名稱、IP位置與URL。
注意事項:
- 使用Https的網址標準的通訊埠是443
- 請允許443通訊埠能使用
此外，主機名稱不是基於地區，而是基於產品的版本。 這表示-en是英文版，-es是西班牙文版(Espanol)，-jp是日文版 ，等等。
這些主機名稱都指向全域CDN，因此它們會路由到較鄰近的區域伺服器。
伺服器不管是通過DNS解析或是IP位置，都將使用以下端口
- Apex One: TCP 443
-
Apex One (Mac):
- 對於用戶端版本 3.5.3.x 及更高版本：TCP 443
- 對於用戶端版本 3.5.2.x：TCP 8443
推薦的安全清單方法是按照DNS名稱。Apex One as a Service 使用 Microsoft 的 Azure Cloud基礎架構上。 因此，Apex One as a Service不存在運行一組或多個IP。通過允許的DNS名稱， 將無須另外允許大量IP子網，因為可以透過DNS動態解析IP位置。
如果您的防火牆不支援DNS白名單，請聯繫趨勢科技技術支援 並提供您的Apex One as a Service URL與Apex Central as a Service URL
Click the image to enlarge.
第一個DNS名稱是管理介面的登入名稱，這可以在登入Apex One as a Service的時候在網址欄中找到。
Apex One
另外兩個必需的名稱是Apex One服務器的DNS名稱與Apex One (Mac)DNS名稱。
以下是查找Apex One as a Service名稱步驟:
- 登入Apex One as a Service (Apex Central) 網頁主控台
- 點擊Directories.
- 點擊Product Servers.
- 核對產品是Apex One
Click the image to enlarge.
Apex One (Mac)
以下是查找Apex One (Mac) as a Service名稱步驟:
- 登入Apex One as a Service (Apex Central)網頁主控台
- 點擊Directories.
- 點擊Product Servers.
- 核對產品是Apex One (Mac)
Click the image to enlarge.
Apex One as a Service 使用在 Microsoft 的 Azure Cloud基礎架構中。 因此，Apex One as a Service不存在運行一組或多個IP。
Apex One as a Service目前使用在Azure Cloud的多個區域， Microsoft 有提供JSON格式的安全清單做使用，這裡面包含了他們的數據中心的IP位址範圍。
Microsoft Azure Datacenter IP Ranges
從Microsoft下載的ServiceTags_Public_檔案中，您可以得到當前 Microsoft 提供的公共 IP 列表，您只需在IP列表中導入以下區域名稱：
- "name": "AzureCloud.australiaeast"
- "name": "AzureCloud.centralus"
- "name": "AzureCloud.westeurope"
- "name": "AzureCloud.southeastasia"
- “name”: "AzureCloud.japaneast"
- “name”: "AzureCloud.canadacentral"
- “name”: "AzureCloud.centralindia"
還需要允許用戶端存取以下URL:
- • 以下服務使用 CDN（Content Delivery Network）作為緩存，因此無法提供靜態 IP。
- • 某些URL的訪問取決於所使用的產品的當地語系。如果您使用的是英文版本，則只需要准許“*-en”網址。
下列URL是與Trend Micro Vision One 有關的後端服務，Apex One Saas用戶端會連線到這些位址:
- *.xdr.trendmicro.com
- *.xbc.trendmicro.com
- *.mgcp.trendmicro.com
- *.mdr.trendmicro.com
-
並請允許用戶端透過以下地址上 傳活動數據到數據中心:
Data Center Location URL North America xdr2-nabu-prod-prorca.etdl.trendmicro.com:8080
xlogr-ue1.xdr.trendmicro.com
pgw-us1.mgcp.a1q7.netEurope xdr2-emea-prod-prorca.etdl.trendmicro.com:8080
xlogr-ec1.xdr.trendmicro.com
pgw-eu1.mgcp.a1q7.netJapan xdr2-japan-prod-prorca.etdl.trendmicro.com:8080
xlogr-ane1.xdr.trendmicro.com
pgw-ap2.mgcp.a1q7.netSingapore xdr2-sg-prod-prorca.etdl.trendmicro.com:8080
xlogr-ase1.xdr.trendmicro.com
pgw-ap3.mgcp.a1q7.netAustralia xdr2-au-prod-prorca.etdl.trendmicro.com:8080
xlogr-ase2.xdr.trendmicro.com
pgw-ap4.mgcp.a1q7.netIndia xdr2-in-prod-prorca.etdl.trendmicro.com:8080
xlogr-as1.xdr.trendmicro.com
pgw-ap5.mgcp.a1q7.net - Apex One Telemetry
- asm01-nabu-prod.aot.trendmicro.com
- asm01-emea-prod.aot.trendmicro.com
- api-nabu.aot.trendmicro.com
- api-emea.aot.trendmicro.com
- ActiveUpdate - https://osce14-p.activeupdate.trendmicro.com/activeupdate
- Global Smart Scan Server - https://osce14.icrc.trendmicro.com/tmcss
- License Server - https://licenseupdate.trendmicro.com/ollu/license_update.aspx
- PR Feedback Server - https://licenseupdate.trendmicro.com/fb/bifconnect.ashx
- Web Rating Server
- osce14-0-en.url.trendmicro.com
- osce14-0-jp.url.trendmicro.com
- osce14-0-tc.url.trendmicro.com
- osce14-0-de.url.trendmicro.com
- osce14-0-fr.url.trendmicro.com
- osce14-0-sp.url.trendmicro.com
- osce14-0-ru.url.trendmicro.com
- osce14-0-it.url.trendmicro.com
- osce14-0-po.url.trendmicro.com
- osce14-0-kr.url.trendmicro.com
- Smart Feedback
- osce140-de.fbs25.trendmicro.com
- osce140-en.fbs25.trendmicro.com
- osce140-es.fbs25.trendmicro.com
- osce140-fr.fbs25.trendmicro.com
- osce140-jp.fbs25.trendmicro.com
- osce140-pl.fbs25.trendmicro.com
- osce140-it.fbs25.trendmicro.com
- osce140-ru.fbs25.trendmicro.com
- osce140-tc.fbs25.trendmicro.com
- osce140-kr.fbs25.trendmicro.com
- NFC Server
- osce14-en.gfrbridge.trendmicro.com
- osce14-jp.gfrbridge.trendmicro.com
- osce14-tc.gfrbridge.trendmicro.com
- osce14-kr.gfrbridge.trendmicro.com
- osce14-de.gfrbridge.trendmicro.com
- osce14-fr.gfrbridge.trendmicro.com
- osce14-it.gfrbridge.trendmicro.com
- osce14-es.gfrbridge.trendmicro.com
- osce14-ru.gfrbridge.trendmicro.com
- osce14-po.gfrbridge.trendmicro.com
- Census server
- https://osce14-en-census.trendmicro.com
- https://osce14-de-census.trendmicro.com
- https://osce14-fr-census.trendmicro.com
- https://osce14-es-census.trendmicro.com
- https://osce14-it-census.trendmicro.com
- https://osce14-pl-census.trendmicro.com
- https://osce14-ru-census.trendmicro.com
- https://osce14-jp-census.trendmicro.com
- https://osce14-kr-census.trendmicro.com
- https://osce14-tc-census.trendmicro.com
- Census server (Backup)
- osce14bak-en-census.trendmicro.com
- osce14bak-de-census.trendmicro.com
- osce14bak-es-census.trendmicro.com
- osce14bak-fr-census.trendmicro.com
- osce14bak-it-census.trendmicro.com
- osce14bak-jp-census.trendmicro.com
- osce14bak-kr-census.trendmicro.com
- osce14bak-pl-census.trendmicro.com
- osce14bak-ru-census.trendmicro.com
- osce14bak-sc-census.trendmicro.com
- osce14bak-tc-census.trendmicro.com
- Predictive Machine Learning (File)
- osce140-en-f.trx.trendmicro.com
- osce140-de-f.trx.trendmicro.com
- osce140-es-f.trx.trendmicro.com
- osce140-fr-f.trx.trendmicro.com
- osce140-it-f.trx.trendmicro.com
- osce140-jp-f.trx.trendmicro.com
- osce140-kr-f.trx.trendmicro.com
- osce140-pl-f.trx.trendmicro.com
- osce140-ru-f.trx.trendmicro.com
- osce140-tc-f.trx.trendmicro.com
- Predictive Machine Learning (Behavior)
- osce140-en-b.trx.trendmicro.com
- osce140-de-b.trx.trendmicro.com
- osce140-es-b.trx.trendmicro.com
- osce140-fr-b.trx.trendmicro.com
- osce140-it-b.trx.trendmicro.com
- osce140-jp-b.trx.trendmicro.com
- osce140-kr-b.trx.trendmicro.com
- osce140-pl-b.trx.trendmicro.com
- osce140-ru-b.trx.trendmicro.com
- osce140-tc-b.trx.trendmicro.com
- Predictive Machine Learning (Co-Exist Mode)
- oscecmp140-de-f.trx.trendmicro.com
- oscecmp140-en-f.trx.trendmicro.com
- oscecmp140-es-f.trx.trendmicro.com
- oscecmp140-fr-f.trx.trendmicro.com
- oscecmp140-it-f.trx.trendmicro.com
- oscecmp140-jp-f.trx.trendmicro.com
- oscecmp140-kr-f.trx.trendmicro.com
- oscecmp140-pl-f.trx.trendmicro.com
- oscecmp140-ru-f.trx.trendmicro.com
- oscecmp140-tc-f.trx.trendmicro.com
