TREND SERVER IP RANGES
For endpoints on UF networks, we have two ip ranges for Trend servers:
-
APP Servers (OSCE, TMCM,TMSM) are on 10.19.140.112/28
-
SPS Servers are on 10.19.140.96/28
For endpoints on Healthnet (HSC), there is one ip range for all servers:
-
10.40.5.20/28
PORTS USED BY TREND
-
APP - TCP 8080 – OSCE outbound client communication - client->server
-
APP - TCP 32484 – OSCE inbound client communication (PC agents) - server->client
-
APP - TCP 61617 – TMSM inbound client communication (Mac agents) - server-> client
-
APP - TCP 443 and TCP 4343 Web Console Access - admin workstations->server
-
APP - TCP 137, 139, and 445 - Quarantined file upload - server <-> client
-
SPS - TCP 5274 – SPS Web Reputation - client->server
-
SPS - TCP 443 – SPS File Reputation - client->server
The arrow indicates where the traffic initiates. For example "server->client" indicates that the server is initiating communication and the ACE will need to allow traffic inbound into the unit's network. <-> indicates bi-directional traffic where initiation can start on either side. The APP/SPS prefix indicates which Trend ip range is involved.
WHAT DO YOU NEED TO DO?
For endpoints on UF networks, units will only need to have Network Services make the following changes:
-
allow incoming traffic on TCP port 32484 from 10.19.140.112/28
-
allow incoming traffic on TCP port 61617 from 10.19.140.112/28
For endpoints on Healthnet (HSC), units will only need to have Network Services make the following changes:
-
allow incoming traffic on TCP port 32484 from 10.40.5.20/28
-
allow incoming traffic on TCP port 61617 from 10.40.5.20/28
This will allow the OSCE and TMSM servers to initiate communication with your agents.
If your networks restrict outbound communication, you may need have Network Services add rules for all ports mentioned in the "Ports Used by Trend" section above.