Trend Micro Licensing Guide - Europe information as per January 2024

quick links: Small Business Network One (incl. TXOne)

Workforce One & Vision One Managed XDR, Detection and Response
Cloud One Service One

Product_Description Licensed by Definition Notes

Small Business
Worry-Free
Worry-Free XDR Per seat A "seat” is any computer system that will be protected by a Trend Micro product, Two free mobile device seats included per seat for products that include
Worry-Free Services Advanced whether it is a personal computer, workstation, server or other electronic device Worry-Free Services
Worry-Free Services
Worry-Free Services Endpoint Detection & Response Add-On
Worry-Free Services with EDR Add-on
Worry-Free with Co-Managed XDR: Service for Endpoint
Worry-Free with Co-Managed XDR: Service for Endpoint and Email
Worry-Free Advanced
Worry-Free Standard
Consumer
Trend Micro Maximum Security Per seat A "seat” is any computer system that will be protected by a Trend Micro product,
Trend Micro Internet Security whether it is a personal computer, workstation, server or other electronic device

Workforce One & Vision One

Vision One / XDR
Trend Micro Vision One Credits Per credits The credit model enables a means to accommodate a single purchase of Trend Micro
Vision One regardless of how it will be deployed in a customer’s environment.
Different sensor types (Endpoint/server, email and network sensors) and different
Vision One apps (mobile, sandbox analysis) have different credit requirements. You
simply calculate (calculator tool available) the number of credits required according
to the customer’s need and environment. Once credits are purchased, customers can
view the real-time credit allocation in the Trend Micro Vision One console, and can
make adjustments to how credits are allocated
Trend Vision One - Endpoint Security Core / Essentials / Pro Per device Any computer system that will be protected by a Trend Micro product, whether it is
a personal computer, workstation, server or other electronic device; 1 year
subscription for the licensed number of devices (endpoints, servers, virtual machines
SAP Scanner for Vision One – Endpoint Security (Pro) or cloud workloads). Customer must have Trend Vision One - Endpoint Security Pro
Trend Vision One - Email and Collaboration Security Core / Essentials / Pro Per User Number of users assigned in AD (active directory). If AD has not been sync'd, V1ECS
will calculate the total number of unique email accounts
Zero Trust Secure Access Per user “User” is defined as: (1) each individual user with assigned device(s) and (2) each
Vision One XDR Add-on: Endpoint, Server and Cloud Workloads / XDR Data Retention installed server OS (Example: 200 individual user + 100 installed server OS = 300
“users”)
Trend Micro XDR for users
Vision One Attack Surface Risk Management Per IT managed endpoint/server
Per cloud account
Vision One – Forensics (requires EDR/XDR for endpoint/server/workload) per 10GB Per 10 Gbps throughout Vision One – Forensics is priced per 10GB of data warehousing, which include If a customer wants 35GB, they would buy 4 units of SKU from price list
ingesting, processing, storage and export
Trend Vision One Container Security Per container node or Amazon ECS A Container Node is a worker machine running containers in a cluster and may be a
instance VM or a physical machine, depending on the cluster. (e.g. Kubernetes Node).
Per serverless container A Serverless Container is a serverless compute engine for containers that removes the
need to provision and manage servers, letting you specify and pay for resources per
application. (e.g. AWS Fargate).
 Trend Micro Licensing Guide - Europe information as per January 2024

quick links: Small Business Network One (incl. TXOne)

Workforce One & Vision One Managed XDR, Detection and Response
Cloud One Service One

Product_Description Licensed by Definition Notes

Vision One XDR Add-on: Cloud App Security Per email user / mailbox Users of the organization cloud applications protected by Trend Micro (i.e. Microsoft
Office 365, G Suite, Dropbox, Box, etc.)
Vision One XDR Add-on: Deep Discovery Inspector Per Gbps Licensed throughput must match that of the total DDI appliance(s) Example: if the customer has two DDI 4000's the volume would be 8 (Gbps)
in the banded price
Vision One XDR for Networks / Vision One XDR for Networks - Extended Storage Per 500mbps Combined average throughput customer is using. If customer uses 3.6 gbps of total combined average throughput over the
past 30 days (sum of averages), please round up the throughput to the next
number (in this case 4gbps). Therefore this customer's license should be 8 as
(4gbps / 500mbps = 8)
Vision One XDR for OT Per device Number of OT devices connected to Vision One platform with XDR capability, 30-day
data retention
Per node Network: Number of nodes, offering XDR capability, 30-day data retention EdgeIPS 102, 103, EdgeIPS LE > 1HW device = 1 node
EdgeIPS Pro 1048, 2096 > 1 module card= 12 nodes
EdgeIPS Pro 216 (Rugged/commercial) > 1HW device = 8 nodes
Vision One XDR for Cloud / Vision One - XDR for Cloud - Extended Storage Per GB Customers will need to provide an estimate of their total monthly usage in
GB, however, as the price is annual, that estimated monthly usage needs to
be multiplied by 12 months to calculate the annual number of GB for the
quote. (e.g. formula: customer estimated data usage per month x 12 = # GB
(quantity) for pricing)
Smart Protection Suites
Smart Protection for Endpoints Per user Users with access to the internet and protection by Trend Micro
Smart Protection Complete
Apex One Add-ons
Apex One on-prem includes Mac, VDI, iDLP, iVP, iAC and Apex Central Per user “User” is defined as: (1) each individual user with assigned device(s) and (2) each
Apex One as a Service includes Mac, iDLP, iVP, iAC and Apex Central installed server OS (Example: 200 individual user + 100 installed server OS = 300
Apex One as a Service + XDR add-on “users”)
Apex One Sandbox as a Service Add-on
Apex One Endpoint Sensor Add-on for Apex One On-premises
Virtual Desktop Infrastructure Add-on for Apex One Per User Users with access to the internet and protection by Trend Micro
TM Security for Macintosh
Trend Micro Integrated Data Loss Prevention
Apex Central (formerly TM Control Manager)
Mobility
Trend Micro Mobile Security Per User Users with access to the internet and protection by Trend Micro
Endpoint Encryption
Endpoint Encryption Per device Any computer system that will be protected by a Trend Micro product, whether it is
a personal computer, workstation, server or other electronic device
Web Security
Trend Micro Web Security (Standard or Advanced) Per user Users with access to the internet and protection by Trend Micro

InterScan Web Security Virtual Appliance

Trend Micro Web Security Static Outbound IP add-on Per dedicate IP address The solution includes 48TB of traffic per year (supports approx. 2,000 seats per year).
If the customer has 6,000 TMWS seats the customer should purchase quantity 3
Static Outbound IP add-ons
 Trend Micro Licensing Guide - Europe information as per January 2024

quick links: Small Business Network One (incl. TXOne)

Workforce One & Vision One Managed XDR, Detection and Response
Cloud One Service One

Product_Description Licensed by Definition Notes

Email & Collaboration
Cloud App Security (Standard or Advanced) Per user Users of the organization cloud applications protected by Trend Micro (i.e. Microsoft
Office 365, G Suite, Dropbox, Box, etc.)
Smart Protection for Microsoft 365 Per user Email users (does not include system mailboxes like meeting rooms)
Trend Micro Email Security (Standard or Advanced)

ScanMail Suite for Exchange

ScanMail Suite for IBM Domino
InterScan Messaging Security
InterScan Messaging Virtual Appliance
Email Reputation Services
Data Privacy and Encryption Add-on for IMSVA
IM Security for Microsoft Servers Per user User of the organizations communication system
PortalProtect with DLP for Sharepoint Per user Users of the organization's SharePoint system. For situations where the number of
SharePoint users cannot be counted, like external web portals, a per-server license is
available. The per-server license per each externally facing SharePoint Web Server
and is added in addition to the internal users.
Phish Insight Per employee Number of eployees working in end user's organization
Cloud Edge
Cloud Edge 50 HW appliance only Per appliance Number of hardware appliances Note this is the number of appliances we will ship to the partner. This is an
upfront once-off purchase (no maintenance, support fees will apply)
[xSP Reporting] Cloud Edge 50E, Log forward and Cloud Sandbox licenses Per appliance Number of hardware appliances Note this is the usage of the SW part. This will need to be reported monthly
through LMP.
Cloud One
Deep Security Software Per server/VM (cloud workloads) Each virtual machine (VM), server or cloud workload which is protected via a Per VM (virtual machine) means a software container, implementation, or
connection directly or indirectly to the network or servers on which the Trend Micro emulation of a Computer (i.e., a physical Per device) that runs its own
product is installed. This can be agent-based or agentless. operating system and executes application programs like a physical
Computer.
Per CPU Each CPU (socket) which is protected via a connection directly or indirectly to the New sale is no longer available.
network or servers on which the Trend Micro product is installed. This can be agent-
based or agentless.
Per Non-Server (Kiosk/POS/VDI) Each non-server system including Kiosk machines, Point-of-Sale (POS) and virtual
desktop (VDI) which is protected via a connection directly or indirectly to the
network or servers on which the Trend Micro product is installed. This can be agent-
based or agentless.
Deep Security Sandbox as a Service Add-On Per server/VM (cloud workloads) Each virtual machine (VM), server or cloud workload which is protected via a Per VM (virtual machine) means a software container, implementation, or
connection directly or indirectly to the network or servers on which the Trend Micro emulation of a Computer (i.e., a physical Per device) that runs its own
product is installed. This can be agent-based or agentless. operating system and executes application programs like a physical
Computer.
The number of sandbox licenses must match the number of DS server
licenses
 Trend Micro Licensing Guide - Europe information as per January 2024

quick links: Small Business Network One (incl. TXOne)

Workforce One & Vision One Managed XDR, Detection and Response
Cloud One Service One

Product_Description Licensed by Definition Notes

Cloud One - Endpoint Security / Cloud One - Endpoint Security with XDR Per device Any computer system that will be protected by a Trend Micro product, whether it is
a personal computer, workstation, server or other electronic device; 1 year
subscription for the licensed number of devices (endpoints, servers, virtual machines
or cloud workloads).
Cloud One - Workload Security with XDR Per device Any computer system that will be protected by a Trend Micro product, whether it is
a personal computer, workstation, server or other electronic device; 1 year
subscription for the licensed number of devices (endpoints, servers, virtual machines
or cloud workloads).
Cloud One - Conformity Per cloud account Cloud service providers such as Amazon Web Services, Azure and Google Cloud offer
many cloud services (i.e. compute, storage, and database) and their customer's
access these services via their "cloud account". Customers can have multiple
accounts per vendor.
Cloud One - Network Security Per Gbps
Per 100 mbps
These licenses can be stacked for additional throughput. Licenses are not
tied to a single instance but can be used across multiple virtual appliance
deployments.
Inspected Traffic per 100k GB (100 TB) Sold as 100 thousand GB (100 TB)/unit per year. Licenses can be stacked and
combined with other Network Security SKUs. Customers can purchase
additional units throughout the contract. This license is only for the cost of
inspecting traffic for Cloud One - Network Security. This service can be
purchased for virtual appliance and hosted infrastructure deployments.

Inspected Traffic per 1M GB (1000 TB) Sold as 1 million GB (1000 TB)/unit per year. Licenses can be stacked and
combined with other Network Security SKUs. Customers can purchase
additional units throughout the contract. This license is only for the cost of
inspecting traffic for Cloud One - Network Security. This service can be
purchased for virtual appliance and hosted infrastructure deployments.
Hosted Infrastructure per service Sold as 1 service endpoint / AZ per year. Licenses can be stacked and
endpoint deployment / AZ combined with other Network Security SKUs. This is the network security
that will be deployed in the customers environment to be able to inspect
the network traffic. 50k of inspected traffic is included with each purchased
service endpoint and the inspected traffic will be an aggregate.
Cloud One - Application Security Per container A container can be both a serverless container which removes the need to provision
and manage servers, or a regular container (e.g., AWS Fargate, or ECS)
Per 1 Billion serverless function A function is a resource that gets invoked to run your code in a serverless Quantity = number of billions of serverless function invocations
invocations compute environment (e.g., AWS Lambda)
Per server/VM A single compute instance running on a physical machine (e.g., VMware, or AWS EC2)

Cloud One - Container Security Per serverless container A Serverless Container is a serverless compute engine for containers that removes the
need to provision and manage servers, letting you specify and pay for resources per
application. (e.g. AWS Fargate).
Per container node A Container Node is a worker machine running containers in a cluster and may be a
VM or a physical machine, depending on the cluster. (e.g. Kubernetes Node).
 Trend Micro Licensing Guide - Europe information as per January 2024

quick links: Small Business Network One (incl. TXOne)

Workforce One & Vision One Managed XDR, Detection and Response
Cloud One Service One

Product_Description Licensed by Definition Notes

Cloud One - File Storage Security Per bucket A 'bucket' is a public cloud storage resource available in Amazon Web Services' (AWS) An S3 bucket is an AWS naming convention, however the concept of a
Simple Storage Service (S3), an object storage offering. Amazon S3 buckets, which are 'bucket' can apply to Microsoft Azure Blobs or Google Cloud Storage cloud
similar to file folders, store objects, which consist of data and its descriptive storage resrouces when pricing out Cloud One – File Storage Security.
metadata.
Cloud One Open Source Security by Snyk Per project A project is defined as a manifest of open source dependencies stored in a file within One project entitles a customer to 1 test per day of that project for 12
a software component source code. Example project files include: pipfile, months. An average application may be made up of 30 projects, each
[Link], [Link] project is tested for vulnerabilities once per day (30 X $80 = $2,400 per
year). Organizations with large dev teams can have tens of thousands of
projects.
Cloud Sentry Per AWS cloud account Amazon Web Services offers many cloud services (i.e. compute, storage, and
database) and their customer's access these services via their "cloud account".
Customers can have multiple accounts per vendor
SAP Scanner for Cloud One - Workload Security per SAP server/host/computer with the Each SAP server/host/computer that has the SAP Netweaver VSI-API (NW-VSI 2.0) has
SAP Netweaver VSI-API (NW-VSI 2.0) to be licensed with this SAP scanner add-on

ServerProtect for Storage Per user Per user accessing data on a storage network
e.g. If you have a customer that knows they will have 10,000 users accessing 50 TB of
data, it may be best to quote per user ServerProtect for Storage
Per TB Amount of data being accessed on a storage network
e.g. If you have a customer that does not know the number of users who will be
accessing the storage server, possibly its just applications on the storage device, then
the best way to price is by storage size
Network One
Deep Discovery Inspector Quantity Quantity = how many are sold This is an appliance in it includes software, Per hardware and support. The
appliances are each labled with the throughput they support.
Deep Discovery Bundle - vDDI, Sandbox aaS, DDNA 1Gpbs Quantity Quantity = how many are sold This is a bundle with the 1Gbps solution. You can not stack this solution
meaning if you buy quantity 3 you don't get 3Gbps of throughput
Deep Discovery Director - Network Analytics Module on-prem Quantity Quantity = how many are sold The throughput must match the total throughput of the customers DDI
deployment. On-prem is sold in separate SKU's listed for 1, 2, 3 or 4 Gbps
Deep Discovery Analyzer Quantity Quantity = how many are sold There is only one SKU for this and it includes Per hardware, software and
support
Deep Discovery E-Mail Inspector HW Quantity Quantity = how many are sold
Deep Discovery E-Mail Inspector SW (Advanced Threat Protection / Gateway Module / Per user Email users (does not include system mailboxes like meeting rooms)
Advanced Threat and Gateway Modules)
TippingPoint
TippingPoint virtual and physical Per devices Quantity Quantity = how many are sold The Per device (virtual or physical appliance) is sold seperately from the
software and throughput license
TippingPoint inspection license Throughput How many Gbps will the device support Must align with the supported throughput of the Per device
TXOne
Trend Micro Portable Security 3 Standard - TXOne Edition Per hardware Per hardware defined as the portable USB stick which can be used to scan multiple
devices. Recommend a 1:10 ratio of Portable Security USB scanners to 10 endpoints
being scanned.
 Trend Micro Licensing Guide - Europe information as per January 2024

quick links: Small Business Network One (incl. TXOne)

Workforce One & Vision One Managed XDR, Detection and Response
Cloud One Service One

Product_Description Licensed by Definition Notes

Trend Micro Safe Lock TXOne Edition Advanced Per seat A “Per seat” is any computer system that will be protected by a Trend Micro product,
whether it is a personal computer, workstation, server or other electronic device

Trend Micro Safe Lock - TXOne Edition Per seat A “Per seat” is any computer system that will be protected by a Trend Micro product,
whether it is a personal computer, workstation, server or other electronic device

TXOne Stellar Per seat A “Per seat” is any computer system that will be protected by a Trend Micro product,
whether it is a personal computer, workstation, server or other electronic device

EdgeFire - TXOne Next Generation Firewall for ICS Per hardware, Software is per node
EdgeIPS - TXOne Next Generation IPS for ICS Per hardware, Software is per node
EdgeIPS Pro - TXOne Next Generation Multi-Seg IPS for ICS Per hardware, Software is per module
card
EdgeIPS LE Per hardware
ODC-VA / EdgeOne Per node EdgeIPS 102, 103, EdgeIPS LE > 1HW device = 1 node
EdgeIPS Pro 1048, 2096 > 1 module card = 12 nodes
EdgeIPS Pro 216 (Rugged/commercial) > 1HW device = 8 nodes
Managed XDR, Detection and Response
Managed XDR, Endpoints, Servers & Cloud Workloads (Messaging included) Per user “User” is defined as: (1) each individual user with assigned device(s) and (2) each Quote based on the total # of endpoint users + # of servers (VM or non-
installed server OS (Example: 200 individual user + 100 installed server OS = 300 servers).
“users”) Messaging service will be included by default (does not add to user count)
Managed XDR, Networks Network capacity Total network capacity of Deep Discovery Inspector products
Service One
Service One Complete/Essentials Endpoint & Workloads (includes Messaging) Per device Sum of endpoints and servers. Examples:
Mailboxes are not to be counted, unless when customer purchases this solely for Customer has 1001 endpoints:
Messaging only. In that case we will have to license this per mailbox. -We should quote using the price for 1001.
Includes Targeted Attack Detection and Service One PSP Essentials. 1 year Customer has 1001 servers and 0 endpoints and 0 mailboxes that have
subscription for total # of endpoint users + # of servers (VM or non-servers). Trend Micro products.
Service for messaging is included (do not count license quantity). -We should quote using the price for 1001, please use the 1001 band SKU.
Customer has 1500 mailboxes with 0 endpoints and 0 servers that have
Trend Micro products.
-We should quote using the price for 1500.
Customer has 1000 endpoints and 100 servers.
-We should quote using the price for 1100 (1000 endpoints + 100 servers)
Customer has 1001 endpoints and 1500 mailboxes.
-We should quote using the price for 1001.
NOTE: Minimum spend across Service One offerings apply

Service One Complete/Essentials Network Network capacity Total network capacity of Deep Discovery Inspector products

©2024 by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo, Apex One(TM), and Trend Micro Control Manager are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change
without notice. For more information, visit [Link]. For details about what personal information we collect and why, please see our Privacy Notice on our website at: [Link]