Key takeaways
- Turning off AiProtection alone may not stop all sharing if Adaptive QoS or Traffic Analyzer is still enabled.
- Withdrawing consent disables every Trend Micro-based feature at once, including Adaptive QoS and parental web filters.
- After a factory reset, all Trend Micro components start disabled until you accept the terms again.
The Trend Micro connection on an ASUS router is AiProtection, a free, subscription-free security suite built on Trend Micro’s threat database and traffic-inspection engine; it blocks known malicious sites, stops infected devices from calling home and (on Pro versions) runs two-way intrusion prevention, but turning it on means agreeing to share some network data with Trend Micro. Whether to use it comes down to what you value more on your network: an extra safety layer for less technical household members, or keeping traffic metadata entirely local.
What Trend Micro actually does inside an ASUS router
ASUS licenses Trend Micro’s deep packet inspection (DPI) engine and its cloud reputation service. The engine looks at connection details such as destination domains, IP addresses and traffic signatures, compares them with Trend Micro’s threat lists, and acts locally on the router. The same engine also classifies traffic by app, which is why several non-security features depend on it too.
| Feature | What it does | Uses Trend Micro engine | Requires data-sharing consent |
|---|---|---|---|
| Router Security Assessment | Scans about a dozen router settings (default login, weak Wi-Fi password, WPS, UPnP, WAN web access, DMZ, port forwarding, anonymous FTP) | Part of AiProtection | Yes, as part of AiProtection |
| Malicious Sites Blocking | Blocks domains linked to phishing, malware, ransomware and scams; has an allow list | Yes | Yes |
| Two-Way IPS | Blocks inbound exploit attempts and spots suspicious outbound traffic from infected devices | Yes (AiProtection Pro only) | Yes |
| Infected Device Prevention and Blocking | Cuts off a device that tries to contact a known command-and-control server | Yes | Yes |
| Parental Controls: Web and Apps Filters | Category-based content blocking per device | Yes | Yes |
| Parental Controls: Time Scheduling | Internet access schedules per device | No | No |
| Adaptive QoS | Prioritizes traffic by app category (gaming, streaming, video calls) | Yes | Yes |
| Traffic Analyzer, Apps Analyzer, Web History | Per-device and per-app usage statistics and visited-site logs | Yes | Yes |
The key point many owners miss: AiProtection is not the only feature tied to Trend Micro. If you rely on Adaptive QoS or the traffic statistics, you are already using the same engine and the same consent.
AiProtection Classic vs AiProtection Pro
Most current ASUS RT, ZenWiFi and ROG Rapture routers, including Wi-Fi 7 models, ship with AiProtection Pro. Some entry-level models carry AiProtection Classic, which drops Two-Way IPS. Both are free for the life of the router; ASUS does not charge a subscription for these features, which is a meaningful difference from several rival brands that lock security behind a monthly plan.
The privacy side: what you are agreeing to
When you first enable any Trend Micro-powered feature, the router asks you to accept ASUS’s and Trend Micro’s privacy terms. The disclosure, viewable under Administration, Privacy in the router interface, covers collection of information such as URLs and domains being looked up, device and app identifiers, and threat events, used to improve detection and the service. Because the engine is closed source, outside researchers cannot audit exactly what leaves the router.
Three practical facts are worth knowing:
- Turning off AiProtection alone may not stop all sharing if Adaptive QoS or Traffic Analyzer is still enabled.
- Withdrawing consent disables every Trend Micro-based feature at once, including Adaptive QoS and parental web filters.
- After a factory reset, all Trend Micro components start disabled until you accept the terms again.
How to turn it on, tune it or switch it off
To enable and tune AiProtection
- Log in at router.asus.com (or the router’s IP address) or open the ASUS Router app.
- Go to AiProtection and switch on Network Protection; accept the terms when prompted.
- Run the Router Security Assessment and fix every item marked as unsafe, especially default admin credentials, WPS and WAN-side web access.
- Check that Malicious Sites Blocking, Two-Way IPS and Infected Device Prevention are all enabled.
- If a legitimate site gets blocked, add it to the allow list rather than disabling the whole feature.
To stop sharing data with Trend Micro
- Disable AiProtection, Adaptive QoS, Traffic Analyzer, Apps Analyzer and Web History.
- Go to Administration, then the Privacy tab.
- Click Withdraw under the Trend Micro section. The button appears only if a feature that shares data has been enabled.
- Reboot the router and confirm the features show as disabled.
Performance and compatibility trade-offs
- Throughput: DPI uses the router’s CPU. On recent multi-core models the cost is small for most connections, but on older or entry-level routers with very fast internet plans you may see lower peak speeds with inspection enabled.
- QoS and acceleration: some users who switch from Adaptive to manual or traditional QoS find hardware NAT acceleration gets disabled, which can hurt gigabit-plus speeds more than the Trend Micro engine did.
- False positives: smart-home devices, game launchers and VPN apps occasionally trip IPS rules. The AiProtection event log shows which rule fired.
- Custom firmware: Asuswrt-Merlin keeps the Trend Micro components on supported models, so moving to it does not by itself remove the engine or the consent prompt.
Should you use it? A decision guide
| Your household | Recommended setting | Reason |
|---|---|---|
| Kids, older relatives or many smart-home gadgets | Enable AiProtection Pro and parental web filters | Blocks known phishing and malware domains before less careful users reach them |
| Privacy-focused, tech-savvy user | Withdraw consent; use encrypted DNS with filtering (NextDNS, Quad9) or Pi-hole | Similar domain blocking without the closed-source DPI engine |
| Gamer who needs prioritization | Keep Adaptive QoS, or use Gaming Port priority if you withdraw | Adaptive QoS needs the same consent anyway |
| Small office or home office | Enable AiProtection Pro plus endpoint antivirus on each PC | Router IPS catches network-level threats; endpoint tools handle files and email |
| Multi-gig fiber on an older router | Compare speeds with and without AiProtection | Decide whether the security layer costs more speed than you accept |
What AiProtection does not replace
It is a network-level filter, not a full security product. It cannot scan files on your PC, does not see inside most encrypted HTTPS content beyond the domain, and does not protect laptops or phones once they leave home. Keep operating systems updated, use antivirus or the built-in protections on each device, and keep router firmware current; ASUS ships regular security fixes, and an outdated router undermines every feature above.
