In This Space

Armor Knowledge Base  /  Release Notes  

Updates to Trend 11 Micro for Armor Anywhere

Topics Discussed

On September 26, Armor will be releasing a new version of Trend Micro Security, which will enhance the current logging subagent.

To accommodate this update, new and existing Armor Anywhere agent installations will require an additional firewall rule.

For Windows 2012 users, when you install the Armor Agent, the corresponding Trend Micro agent may cause your system to reboot. Trend Micro is currently researching this issue.

Existing Installations 

Before September 26, for any existing installations, please add the following rules:  

Outbound / InboundService / PurposePortDestination
OutboundMalware Protection, FIM, IDS4119/tcp
    • (
    • (
    • (

For existing installations, do not remove any firewall rules. 

New Installations 

After September 26, for new installations, review the following table of all the firewall rules you must add.

The following ports will need to be opened for each server registered with Armor Anywhere.

Inbound / Outbound

Service / Purpose



OutboundArmor Agent443/tcp
OutboundMalware Protection, FIM, IDS


OutboundLog Management (Filebeat / Winlogbeat)515/tcp
OutboundRemote Access443/tcp

Vulnerability Scanning

InboundLog Relay (Logstash)
  • 5140/udp
  • 5141/tcp
The IP address for your virtual machine
OutboundLog Relay (Armor's logging service (ELK))
  • 5443/tcp
  • 5400-5600/tcp (Reserved)
    • Armor reserves the right to utilize this port range for future expansion or service changes.

  • These endpoints are served by the Amazon Elastic Load Balancers. As a result, the actual endpoints will vary dynamically across Amazon's IP ranges.

* The agent will perform a lookup to the applicable DNS entry, which may resolve to one of multiple Amazon Web Services based subnets. As a result, if your firewall does not support outbound filtering by domain name, then you may need to open all outbound traffic to 443/tcp to accommodate this service.

Additionally, verify that your proxy server can externally communicate.

Additional Documentation 

To learn about more pre-installation information, see ANYWHERE Pre-Installation

Was this helpful?
Your Rating:
1 Star2 Star3 Star4 Star5 Star
0 rates

  • No labels

This page has no comments.