Security for Virtualized Environments

Security service for virtual machines, virtualized datacenters and cloud instances delivered by the GravityZone on premise console.

  • Best protection for Windows and Linux virtual machines: enabling real time scanning for file systems, processes, memory and registry
  • Best proven performance in datacenters: up to 20% performance improvement compared to traditional security vendors
  • Works on any virtualization platform: VMware, Citrix, Microsoft Hyper-V, KVM, Oracle, and others on demand
  • Agentless security for VMware vShield
  • Flexible licensing per VS, per VDI or per CPU for consolidated datacenters
or Ask for Proof of Concept
CALL Business Sales
(+44) 203 695 3415

Key Benefits

  • Best performance In virtual environments

    Based on competitive performance testing run with Login Virtual Session Indexer, (Login VSI), GravityZone – SVE has the least impact on applications running in virtualized environments among virtualization security solutions

  • Simple and easy to deploy, lowers implementation duration and cost

    Delivered as a Linux Ubuntu self-configuring hardened virtual appliance, integrates with VMware vCenter, Citrix XenServer, and Active Directory

  • Cost Reductions Through Higher Server Consolidation

    GravityZone Security for Virtualized Environments server consolidation by up to 20% when compared to traditional antimalware, reducing hardware needs and energy consumption

  • Scalable and resilient security

    Eliminates single point of failure and AV storms, grows organically by cloning virtual appliances and automating deployment with golden images

  • Minimized Administrative Overhead

    Combines simplified deployment and administration with powerful antimalware engines and security policies to help streamline IT operations while improving compliance

  • Multi-Platform Coverage

    Optimized protection on all known hypervisors - VMware vShield VMware ESXi, Citrix Xen, Microsoft Hyper-V, Red Hat KVM, Oracle VM and more

Key Features

  • One solution

    • One console offering easy centralized management, deployment and enforcement of security policies to any number of endpoints, on any hypervisor, in any cloud;
    • One architecture enabling full visibility and control in datacenter and cloud through integration with Active Directory, VMware and Citrix hypervisors;
    • One agent covering any combination of virtualization platforms, private and public cloud providers;
  • Performance boosters

    • Centralized scanning offloads antimalware processes from each protected virtual machine to virtual security appliances;
    • Multi-level caching - de-duplicating scanning processes with two-layered caching mechanism;
    • Optimized Scanning – focused on the 10% capable of execution that may harbor malicious code;
  • Universal coverage

    • Any combination of virtualization platforms: VMware, Citrix, Microsoft Hyper-V, KVM, Oracle;
    • Any environment: datacenters, private cloud, public cloud and hybrid cloud;
  • Multiple security layers

    • Antimalware

      Antimalware and antivirus, including real-time protection for file systems, memory, processes and registry database;

    • Behavior Monitoring and Application Control based on Zero-Day Threat Protection;
    • Firewall

      Fully featured two-way personal firewall and host-based intrusion detection and prevention HIDS / HIPS;

    • Content Control

      Multiple thread filtering of web content to identify potential online threats;

    • Device Control

      Port and device control to enforce data protection policies;

  • Scalable and resilient

    • Application delivered as a self-configuring hardened virtual appliance based on Linux Ubuntu;
    • Employs fast and secure open source database MongoDB;
    • Load balancing on multiple security virtual appliances eliminates single point of failure;
    • Scales just by cloning virtual appliances;
  • OS Coverage

    Guest OS

    Microsoft Windows

    • Windows 10, Windows 8, Windows 7, Windows Vista, Windows XP (SP3)
    • Windows Server 2012, Windows Server 2008, Windows Server 2008 R2
    • Windows Server 2003, Windows Server 2003 R2
    • Oracle
    • Solaris 11, 10 (only in VMware vShield environments)


    • Red Hat Enterprise 6.2, 6.1, 5.7, 5.6
    • CentOS 6.2, 6.1, 5.7, 5.6
    • Ubuntu 11.04, 10.04
    • SUSE Enterprise Server 11
    • OpenSUSE 12, 11
    • Fedora 16, 15
  • Virtualization Platforms


    • VMware vSphere 6.0, 5.5, 5.1, 5.0 P1 or 4.1 P3
    • ESXi 6.0, 5.5, 5.1, 5.0, 4.1
    • VMware vCenter Server 6.0, 5.5, 5.1, 5.0 or 4.1
    • VMware vShield Manager 5.5, 5.1, 5.0
    • VMware vShield Endpoint
    • VMware vCNS 5.5, 5.5.4
    • VMware Tools 8.6.0 build 446312
    • VMware View 5.1, 5.0


    • Citrix XenDesktop 7.5, 5.5, 5.0
    • Citrix XenServer 6.0, 5.6 or 5.5 including
    • Citrix Xen Hypervisor
    • Citrix VDI-in-a-Box 5.x


    • Microsoft Hyper-V Server 2012, 2008 R2
    • Microsoft Hyper-V Hypervisor


    • Red Hat Enterprise 3.0 including
    • Red Hat KVM Hypervisor


    • Oracle VM 3.0

GravityZone is the first

security solution to properly address the scalability and performance challenges that enterprises face today, built from the ground up for heterogeneous environments.
Ask for Proof of Concept

CALL Business Sales

(+44) 203 695 3415
Organizations have the flexibility to deploy any or all of the security services within GravityZone: Security for Virtualized Environments, Security for Endpoints, Security for Mobile and Security for Exchange.

Bitdefender GravityZone FAQ

What is Bitdefender GravityZone?

Bitdefender GravityZone is the new Bitdefender enterprise security solution for Medium to Very Large Organizations. It's redesigned from the ground up with a fresh, but proven private cloud computing architecture that takes full advantage of virtualized infrastructures. GravityZone leverages Bitdefender's acclaimed antimalware technologies and provides a centralized security management platform for physical, virtualized and mobile endpoints.

GravityZone is a business-agile solution that implements a holistic approach. Not just antivirus, but an enterprise-grade solution that helps organizations to attain their virtualization projects objectives and secure data, while preserving the systems' performance and users' productivity.

With built in redundancy and load balancing mechanism, it's capable to scale-out on-demand to protect from hundreds to hundreds of thousands of endpoints, and provides administrators with a single pane of glass into organization's security postures, global threats and dashboards for various roles within the organization.

What is the new Bitdefender GravityZone?

From platform architecture to security services, GravityZone emerges as a reinvented enterprise security solution built for the new IT landscape. The solution combines highly optimized virtualization aware security with leading detection technologies and a fresh, but proven, architecture.

Complex enterprise environments require tailored, integrated security solutions that support heterogeneous environments with a broad range of systems and usage scenarios. GravityZone has been designed to deliver optimized security for the new threats and risks of data exposures introduced by:

  • Exponential evolution of malware and professionalization, combined with
  • Increased Internet penetration;
  • Exponential increase of data;
  • IT consumerization and convergence of devices and services;
  • Cloud computing and virtualization technologies.

All this has changed the IT landscape, the way information is delivered and consumed, how applications and services are provisioned.

GravityZone itself is implemented as a private cloud solution that runs on virtualized layers and it's packed to enable organizations to secure their IT assets, while helps to reduce administration burden, lower TCO and improve the return-on-investments. The solution removes the scalability limitation of legacy solutions based on client-server architecture and relational databases.

The improvement continues with security services, too. GravityZone extends and integrates security services to virtualized environments and mobile devices. So, as users are expecting the same experience when consuming information on a PC, Laptop, Tablet or Smartphone, the information security will be preserved, too, no matter if is accessed locally or remotely, from a workstation or a mobile device, if the company uses traditional or virtualized infrastructures.

What do you mean by unified security for physical, virtualized and mobile environments?

GravityZone is unified by design and aims to be a solution that covers all security requirements. In current stage it unifies the main security services and provides a single point of management for physical, virtualized and mobile endpoints security. Future development will integrate new security services into GravityZone, like security for email and collaboration, and also will add services enhancements and support for other platforms.

Unlike other solutions that bolt-on modules to an aging architecture, importing different 3rd party technologies and trying to put them together, Bitdefender GravityZone has been architected from the ground up as a unified security management platform across physical, virtualized and mobile environments. It features a modular design that allows flexible and tailored security services, and role based administration.

The solution comprises of the following integrated components:

  • GravityZone Control Center - the management platform that provides the single point of security management across organization.
  • Security for Endpoints - protects Windows workstations and servers.
  • Security for Virtualized Environments - protects virtualized Windows and Linux guest systems, running on VMware, Citrix, Microsoft or any other virtualization platform
  • Security for Mobile Devices - enables secured BYOD adoption, with easy delivery and control of mobile devices security for effective administration.

GravityZone SVE service is mandatory or can I choose any security services?

GravityZone is 100% modularized. This means that you can choose what services you want to license, with the needed number of units per each one.

Even if GravityZone is delivered as virtual appliance, its deployment is not constrained by SVE service activation. However, if you already run or plan to deploy virtualization projects, we recommend you to implement Security for Virtualized Environments (SVE).

With GravityZone you will benefit of effective security and improved administration efficiency from two directions. On one side reduced administration burden due to centralized management and architecture benefits with simple turn-key deployment of GravityZone virtual appliance, built in redundancy and scalability mechanism, and on the other side is the optimized virtualization security services of SVE that will help you attain your business objectives of the virtualization projects and realize the full potential of your investments.

Does GravityZone support a mixed virtualized environment?

For example, there is a need to provide security for VMs running on VMware ESXi and Microsoft Hyper-V at the same time.

Yes, with Security for Virtualized Environments service of GravityZone you can manage all types of virtualization scenarios from a single point of management. GravityZone Control Center is integrated with VMware vCenter and Citrix XenCenter, and also supports many other virtualization platforms, like Microsoft Hyper-V, KVM, RedHat Enterprise Virtualization, or Oracle Virtualization.

Security for Exchange licensing

Security for Exchange is licensed per # of active mailboxes (including room, equipment and shared mailboxes).

A mailbox is counted once even if it has multiple email addresses (i.e. aliases) attached. The license allows installing protection on all supported Exchange Servers in the organization. In addition to Microsoft Exchange protection, the license also covers the endpoint protection modules installed on the server.

How can I test Bitdefender GravityZone solution?

All you need to do is to register for a trial version at

You will receive a confirmation email with instructions and trial license keys with 50 units for each service.

What licensing models/options are available for Bitdefender GravityZone?

GravityZone is a modular solution supporting you to license only what you need, when you need. You can license each security service for the necessary number of units.

Licensing options:

  • Up front paid subscriptions for 1, 2 or 3 years.
  • Possible to license one, two or all security services.
  • GravityZone is licensed per module, based on the number of units for each service.
  • Control Center is provided for free with any Security Service.
  • Security for Virtualized Environment is licensed per:
    • # of virtual desktops (VDI) & virtualized servers (VS) or
    • # of physical CPUs that power the virtualized environment.
  • Security for Endpoints is licensed per # of physical endpoints: desktops & servers
  • Security for Mobile Devices is licensed per # of mobile devices, iOS and Android.

Volume discounts are applicable for each security service, starting from as low as 15 units.

Minimal system demands and resource allocation

GravityZone – SVE is delivered within a Linux-based Security Server for centralized scanning and is managed from GravityZone Control Center, the unified management platform for physical, virtual and mobile endpoints.

  • Virtualization platforms:
  • VMware vSphere 6, 5.5 , 5.1, 5.0 P1 (474610-Patch#1) or 4.1 P3 (433742-Patch#3) incl. ESXi 4.1, ESXi 5.0, ESXi 5.1, ESX 5.5 with:
  • VMware vCenter Server 6, 5.5, 5.1, 5.0 or 4.1
  • VMware vShield Manager 5.5, 5.1, 5.0 and vCNS 5.5, 5.5.4
  • VMware vShield Endpoint installed by vShield Manager on the hosts
  • VMware Tools 8.6.0 build 446312 installed on the protected guest machines in the complete mode or with the vShield driver selected under VMCI in custom mode.
  • VMware View 5.1, 5.0
  • Citrix XenDesktop 5.5, 5.0
  • XenServer 6.0, 5.6 or 5.5 (including Xen Hypervisor)
  • Citrix VDI-in-a-Box 5.x
  • Microsoft Hyper-V Server 2012, 2008 R2 or Windows 2008 R2 (including Hyper-V Hypervisor)
  • Oracle VM 3.0
  • Red Hat Enterprise Virtualization 3.0 (including KVM Hypervisor)
  • Guest operating systems (32/64 bit):
  • Windows 10, Windows 8, Windows 7, Windows Vista, Windows XP (SP3)
  • Windows Server 2012, Windows Server 2008, Windows Server 2008 R2
  • Windows Server 2003, Windows Server 2003 R2
  • Oracle Solaris 11, 10
  • Linux distributions:
  • Red Hat Enterprise Linux 6.2, 6.1, 5.7, 5.6
  • CentOS 6.2, 6.1, 5.7, 5.6
  • Ubuntu 11.04, 10.04
  • SUSE Linux Enterprise Server 11
  • OpenSUSE 12, 11
  • Fedora 16, 15

Note: Agentless version (VMware vShield platform) support for Windows 8 and Windows Server 2012 depends on VMware vShield Endpoint compatibility, and is available starting with VMware vShield Manager version 5.5.

System Requirements

Security for Mobile Devices supports the following types of mobile devices and operating systems:

  • Apple iPhones and iPad tablets (iOS 5.1+)
  • Google Android smartphones and tablets (2.2+)

All Bitdefender GravityZone security services are powered by Control Center infrastructure. To activate the security services for mobile devices you just need to enter a valid license key.

If Security for Mobile Devices is the first GravityZone service in your environment, than you need to deploy the management platform. Requirements for GravityZone Control Center can be found here:

GravityZone Control Center is delivered as a virtual appliance, packed in the following formats:

  • OVA (compatible with VMware vSphere, View)
  • XVA (compatible with Citrix XenServer, XenDesktop, VDI-in-a-Box)
  • VHD (compatible with Microsoft Hyper-V)
  • TAR.BZ2 archives for KVM, Oracle or RedHat Enterprise Virtualization

Support for other formats and virtualization platforms may be provided on request.

Minimum Hardware Requirements

Deploy the GravityZone virtual appliance with the following minimum hardware configuration:

  • CPU: 4 vCPU with 2 GHz each
  • Minimum RAM memory: 6 GB recommended
  • 40 GB of free hard-disk space

Internet Connection

The GravityZone appliance requires Internet access for updates and communication with remote and mobile endpoints.

Control Center Web Console Requirements

To access the Control Center web console, the following are required:

  • Internet Explorer 9+, Mozilla Firefox 14+, Google Chrome 15+, Safari 5+ Recommended screen resolution: 1024x768 or higher