Apex One as a Service FAQs

Trend Micro Apex One™ as a Service regularly publishes news about upcoming events, emerging threats, product updates, and more.

You can access the news feed by clicking the bell icon in the upper right of the Trend Micro Apex Central web console.

Trend Micro recommends excluding certain files and folders from scanning to avoid issues with performance or functionality.

To configure scan exclusion settings, go to Policies → Policy Management → <Policy Name> → Real-time Scan Settings → Scan Exclusion.

Exclude the following file extensions from scanning:

The IBM Domino data directory stores Domino email messages. Trend Micro recommends excluding the Domino data directory from scanning because this directory is regularly updated with new messages; thus, repeated scanning of this folder may not be efficient.

The default Domino data directory for a non-partitioned installation is as follows:

File directories:

Files:

Trend Micro recommends excluding the directory or partition where the Microsoft Exchange mailbox is stored.

To prevent the Exchange Information Store from being corrupted, you must exclude the Installable File System (IFS) M: drive from scanning.

Trend Micro recommends excluding web server log files stored in the default IIS log directory:

Exclude the following file extensions from scanning:

Files:

SCCM 2012 Manager:

SCCM 2012 Endpoint Protection:

File directories:

File extensions:

Attempting to access VMware disk partitions during scanning may affect session loading performance and the ability to interact with virtual machines. As such, Trend Micro recommends excluding large flat files and designed files such as VMware disk partitions.

You can exclude virtual machines by excluding the directories containing the virtual machines or by excluding .VMDK and .VMEM file extensions.

For security reasons, many organizations use exception lists to limit intranet access to only approved communication sources. Because Apex One as a Service servers rely on the Internet to manage Security Agents on endpoints, you may need to add the Apex One DNS names and IP addresses to firewall or gateway exception lists to ensure that your endpoints remain protected.

Apex One as a Service servers use the following ports:

Trend Micro recommends adding DNS names to exception lists so that IP subnets can be dynamically approved according to DNS.

You can find the registered Apex One DNS names on the Product Servers screen of the Trend Micro Apex Central web console (Directories → Product Servers).

Because Apex One as a Service resides on the Microsoft Azure Cloud, Apex One as a Service servers do not use a single IP address or set of IP addresses.

Currently, Apex One as a Service resides in several regions of Azure Cloud. Microsoft provides a list of their datacenter IP ranges at the following location:

The following URLs must be available to endpoint Security Agents:

Apex Central allows you to forward syslog messages from Apex One as a Service to a third-party security information and event management (SIEM) solution.

To configure syslog forwarding on Apex Central, go to Administration → Settings → Syslog Settings and provide the following SIEM server information on the Syslog Settings screen:

Trend Micro Apex Central deploys policies to the Apex One server.

For detailed information about the Apex One as a Service policy deployment process and deployment triggers, see the following article:

https://success.trendmicro.com/solution/1123401-understanding-apex-one-policy-deployment.