BitDefender - Latest Support Articles

How to download Bitdefender on your computer

BitDefender RSS (pr@bitdefender.com) — 2013-05-17T10:55:25+01:00

The Bitdefender installation file can be downloaded from the Bitdefender website at the following address: http://www.bitdefender.com/Downloads/

The download procedure is quite simple (only 3 steps):

1. Click on the “Download” button, next to your corresponding product (ex. Bitdefender Internet Security, Bitdefender Antivirus Plus, etc.)

2. Enter your e-mail address in the window that pops up (you’ll receive all the installation steps via e-mail too, for future reference)

3. Download the installation file.

After downloading the product, you can also, check this article, on how to install Bitdefender.

Enabling On-Access Scanning for Linux Virtual Machines

BitDefender RSS (pr@bitdefender.com) — 2013-05-20T10:58:13+01:00

Bitdefender GravityZone provides full visibility into organizations’ overall security posture, global security threats, and control over its security services that protect virtual or physical desktops, servers and mobile devices. All Bitdefender’s Enterprise Security solutions are managed within the GravityZone through a single console, Control Center, that provides control, reporting, and alerting services for various roles within the organization.

This article is meant to help you enable the on-access scanning module of Security for Virtualized Environments on Linux virtual machines.

Overview
Enabling On-Access Scanning on Linux Virtual Machines

Overview

The Linux version of BDTools includes a beta on-access scanning module that works with specific Linux distributions and kernel versions. On-access scanning support can be enabled manually on each virtual machine. On-access scanning requires the DazukoFS loadable kernel module.

DazukoFS is a stackable file system that enables third-party applications to control file access on Linux systems. For more information, go to http://www.dazuko.org

On-access scanning is available for all supported Windows versions. A beta on-access scanning module is also available for specific Linux distributions and kernel versions, as shown in the following table:

Linux Distribution	Kernel Version

Ubuntu 10.04	2.6.32-44-generic-pae i686, 2.6.32-44-server x86_64, 2.6.32-45-generic-pae i686, 2.6.32-45-server x86_64

RHEL/CentOS 5.7, 5.6	2.6.18-308.24.1.el5 i686 & X86_64, 2.6.18-308.el5 i686 & x86_64, 2.6.18-348.el5 i686 & x86_64

RHEL / CentOS 6.2, 6.1	2.6.32-279.19.1.el6 i686 & x86_64, 2.6.32-279.el6 i686 & x86_64

Debian	2.6.32-5-amd64 x86_64

Enabling On-Access Scanning on Linux Virtual Machines

To enable on-access scanning support on a Linux virtual machine with BDTools installed:

Load the DazukoFS kernel module
During installation, DazukoFS is set to load automatically at boot time. To load the module immediately after installation, you must either restart the virtual machine or run the following command:

# modprobe dazukofs

Note: If the DazukoFS package shipped with is not compatible with the system's kernel version, the module will fail to load. In such case, you can either update the kernel to the supported version or recompile the DazukoFS module for your kernel version. You can find the DazukoFS package in the installation directory:

/opt/BitDefender/share/modules/dazukofs/dazukofs-modules.tar.gz

For more information on compiling and loading DazukoFS for an unsupported kernel version, refer to this KB article

To check if DazukoFS is loaded, run the following command:

# lsmod | grep dazukofs

If the module is loaded, the command outputs a line starting with dazukofs.

Note: To unload the DazukoFS kernel module, you must first reset monitored directories and then make sure to stop the Bitdefender services.

To reset monitored directories:

# /opt/BitDefender/bin/bdsafe registry setkey "/BDUX/EpsecDaemon/OASWatch" ""

To stop the Bitdefender services, run this command:

# /opt/BitDefender/bin/bd stop

To unload the DazukoFS module:

# rmmod dazukofs

After unloading the module, restart the Bitdefender services using this command:

# /opt/BitDefender/bin/bd start
Manage Monitored Directories
Monitoring directories using DazukoFS is issued with the command:

# /opt/BitDefender/bin/bdsafe registry setkey "/BDUX/EpsecDaemon/OASWatch" "/path_1:/path_2:/path_n"

For example, to enable on-access scanning for the /home and /root directories, the command is:

# /opt/BitDefender/bin/bdsafe registry setkey "/BDUX/EpsecDaemon/OASWatch" "/home:/root"

All monitoring will be activated after bdepsecd has been restarted:

# /opt/BitDefender/bin/bd restart

DazukoFS monitors the entire directory tree under a mounted directory, unless a subdirectory is explicitly excluded by the policy.

Important: DazukoFS must be loaded after all separate file systems were mounted (ie: mount a nfs, cifs, ecryptfs and only afterwards activate protection for those mount points).

Note: You cannot watch root file system (/) with DazukoFS. Also protection for the following system paths is not supported and should be avoided: /proc;/bin;/usr;/sbin;/lib

To check the list of directories mounted using DazukoFS, run the following command:

# /opt/BitDefender/bin/bdsafe registry getkey "/BDUX/EpsecDaemon/OASWatch"

Generating Endpoint Security Support Tool log

BitDefender RSS (pr@bitdefender.com) — 2013-05-08T09:21:23+01:00

This article is meant to help you provide the Bitdefender Enterprise Support Team essential troubleshooting information in case Endpoint Security is not functioning properly in your environment.

Overview
Generating Endpoint Security Support Tool log

Overview

Endpoint Security manages protection on the local computer. It also communicates with Control Center to receive the administrator's commands and to send the results of its actions.

If Endpoint Security is not functioning properly, the Bitdefender Enterprise Support Team will require detailed technical information about the affected computers.

To help you provide this information, Bitdefender GravityZone includes a dedicated troubleshooting tool, Endpoint Security Support Tool, accessible from the Control Center.

Generating Endpoint Security Support Tool log

To generate the Endpoint Security Support Tool log:

Log in to the Control Center web console
Click the Help&Support link in the upper right corner
At the bottom of the Support section, click on the link corresponding to the architecture of the affected system. Depending on your browser settings, the Support Tool could be downloaded to a default location on your computer
Run the Support Tool and wait until it collects all the needed troubleshooting information about your computer. When it finishes, a ZIP archive will be generated on your computer’s desktop, containing the necessary troubleshooting information

If you cannot access Control Center, you can download the Endpoint Security Support Tool from the corresponding links below:

For 32-bit Windows operating system press here
For 64-bit Windows operating system press here

GravityZone Communication Ports

BitDefender RSS (pr@bitdefender.com) — 2013-05-08T09:52:20+01:00

Bitdefender GravityZone is a highly scalable and integrated security management solution capable of protecting from hundreds to millions of virtual or physical desktops, servers and mobile devices. GravityZone manages all Bitdefender's Enterprise Security Solutions within Control Center - a web-based console that provides control, reporting and alerting services for various roles within the organization.

The following table provides information on the ports used by the GravityZone components:

Port	Usage

80 (HTTP), 443 (HTTPS)	Port used to access the Control Center web console.

8080 (HTTP), 8443 (HTTPS)	Port used by client/agent software to connect to the Communication Server.

7074 (HTTP)	Update Server port
27017	Default port used by the Communication Server and Control Center to access the Database.

7081 / 7083 (SSL)	Ports used by the BDTools agent to connect to Security Server.

48651	Communication port between the BDTools agent for Linux and Security Server in VMware environments with vShield Endpoint.

48652	Communication port between the hypervisor (vmkernel) and Security Server in VMware environments with vShield Endpoint.

5228, 5229, 5230	Google Cloud Messaging (GCM) ports. The Communication Server uses GCM to send push notifications to managed Android devices.

2195, 2196, 5223	Apple Push Notification service (APNs) ports. Ports 2195 and 2196 are used by the Communication Server to communicate 2195, 2196, 5223 with the APNs servers. Port 5223 is used by managed iOS devices to communicate with the APNs servers over Wi-Fi in specific conditions. For more information, refer to this Apple KB article.

Clueful for Android - Frequently Asked Questions

BitDefender RSS (pr@bitdefender.com) — 2013-05-07T08:30:12+01:00

What is Bitdefender Clueful?

Every day you enjoy the apps you have installed without knowing what they really do behind your back. Some of those apps can break your privacy by sharing personal data, and by tracking your location.

Bitdefender Clueful is a web application that offers you inside information about Android apps. Find out more information about apps that:

access or upload your own address book contacts to their cloud

may learn your real identity

may be careless, sending your passwords over the Internet and putting you’re accounts at risk

may use and upload your Device unique ID to analyze what you do

gather analytics in order to monitor you

track your location

display ads

can cost you money

So what if an app can access my address book or track my location?

Most apps are legitimate but there are also apps that can track your location, access and share your personal information.

Bitdefender Clueful provides the facts, but ultimately you are the one who has to decide if an app is safe to use or not.

For example, a contacts backup app has every right to access your entire address book, but why should a “trap app” do the same?

Does Bitdefender Clueful have all this information about every app out there?

Bitdefender maintains a constantly increasing database of apps we have clues on and thousands of apps are added to this database every day.

Why does Bitdefender Clueful need an Internet connection?

Bitdefender Clueful relies on audit information from the Cloud to constantly offer up-to-date information about apps.

What does the status "Low Risk apps" mean?

This means that there are apps that connect to the Internet without violating your personal information.

I submitted an app that hasn't been analyzed yet. How long before you guys check it?

Thank you! Your submission joins other new apps constantly being added to the queue for analysis. We can't say for sure how long it will take, but we can tell you we're doing our best to get to it as soon as possible.

Can Bitdefender Clueful remove an app from doing something I am not comfortable with?

You can manually remove an app, through Bitdefender Clueful. To do this, tap the name of the application you want to remove, and click Uninstall. Confirm your choice and wait for the uninstall process to complete.

Can I block apps from tracking my location?

Sure, simply go to Settings > Location services on your phone. Turn on or off the location tracking services.

What does Bitdefender Clueful need each permission for?

Internet access -> used for cloud communication.

Read phone status and identity -> used to detect if the device is connected to the Internet and to extract certain device info needed to create an encrypted unique ID when communicating to Bitdefender cloud.

What is Privacy Score?

By calculating a Privacy Score for each and every user, Bitdefender Clueful provides a precise and personal overview of how vulnerable you are, so that you can evaluate and take appropriate actions for each installed app. You should take care when your privacy score is low.

Where can I see details about the analyzed apps?

To see details about the analyzed apps, follow these steps:

Access the Bitdefender Clueful interface;

Select one of the three categories;

Tap the app you are interested in.

Information about the app is displayed.

Is there a division of the most dangerous apps?

Yes, Bitdefender Clueful has a list of the most important clues. Tap the filter icon to view it.

The following information is available in this list:

which apps are viruses

which apps send your identity to strangers

which apps use very intrusive ads

which apps can cost you money

which apps track your location

which apps have access to sensitive data

which apps send data unencrypted

Can I share my thoughts about an app?

Sure! Tap the Like button if the app you what to share thoughts about is in the green category or the Dislike button if the app is in the red or yellow category.

How can I upgrade to Bitdefender Mobile Security?

You can upgrade anytime to Bitdefender Mobile Security and benefit from a complete protection for your mobile device. Bitdefender Mobile Security offers the following features:

Web Security- allows you to check the web pages you access using Bitdefender cloud services.

Anti-Theft- allows you to locate your lost or stolen smartphone and prevents your personal data from getting into the wrong hands.

Application Audit- allows you to see the permissions required by each application installed on your device.

To upgrade to Bitdefender Mobile Security, follow these steps:

Open Bitdefender Clueful.

In the home screen, press the Menu key on your device.

Turn on Advanced Security.

Click Get it now.

You will be directed to Google Play.

Follow the screen instructions to complete the upgrade process.

Where can I find other Bitdefender products compatible with Android?

To access a list of the Bitdefender apps that can be installed on Android, follow these steps:

Open Bitdefender Clueful.

In the home screen, press the Menu key on your device.

Tap More Bitdefender apps.

The list will be displayed.

Bitdefender Client Security 3.6 Release Notes

BitDefender RSS (pr@bitdefender.com) — 2013-04-30T11:42:38+01:00

Bitdefender Client Security is a robust and easy-to-use business security and management solution, which delivers superior proactive protection from viruses, spyware, rootkits, spam, phishing and other malware.

Bitdefender Client Security enhances business productivity and reduces management and malware-related costs by enabling the centralized administration, protection and control of workstations inside companies' networks.

This article provides information on the improvements introduced in Bitdefender Client Security 3.6, together with the list of known limitations.

Bitdefender Client Security 3.6 was released on the 30th of April 2013.

Overview
New Features and Improvements
Limitations

Overview

Version 3.6 is a major update to version 3.5. This version delivers a number of major features and improvements over the previous version, including a new client product, Endpoint Security.

Endpoint Security by Bitdefender will be installed through the Deployment Tool, Network Builder, Automatic Deployment and by applying a security policy.

New Features and Improvements

Microsoft Windows Server 2012 and Microsoft Windows 8 are now supported
Endpoint Security has been added as the default client product
Endpoint Security can be installed on both workstation and server operating systems
Endpoint Security has the ability to scan the web traffic in any web browser
Endpoint Security will detect installed competitor products before deployment and will attempt to uninstall them
Endpoint Security policies will return an error code to the Bitdefender Management Console in case the policies fail to apply
Bitdefender Management Agent is now compatible with Microsoft Windows 8
A new and improved security mechanism has been implemented leveraging the newest Active Virus Control technology

Limitations

Bitdefender Management Server

After installing Bitdefender Management Server 3.6 (or upgrading from Bitdefender Management Server 3.5), Bitdefender Business Client can only be installed or uninstalled through the Deployment Tool
Bitdefender Management Server requires .NET Framework 3.5 in order to be installed on Microsoft Windows Server 2012
Bitdefender Management Server will install Microsoft SQL Server 2005 in compatibility mode on Microsoft Windows Server 2012
The hotfix located at this address is required to install Bitdefender Management Server on Microsoft Windows 2003
Installing Bitdefender Management Server on a Microsoft Windows Server 2003 terminal server requires the server to be set to “install mode”

Endpoint Security

The following policy settings do not work on computers protected by Endpoint Security:
- Advanced Settings:
  - Show Bitdefender News
  - Enable Scan Activity Bar
- Privacy Control
  - Registry Control
  - Script Control
  - Cookie Control
- Exclusions:
  - Manage HTTP Exceptions
- User Control:
  - User Control Enabled
  - Block Web Access
  - Allow the user to add blocked webpages to whitelist
- Antispam policies cannot be applied to Endpoint Security
Endpoint Security cannot be installed on Microsoft Windows 2000
Endpoint Security does not include Antispam and Backup modules
Power User mode is not available for Endpoint Security

Removing Security Software Incompatible With Endpoint Security

BitDefender RSS (pr@bitdefender.com) — 2013-04-30T10:54:42+01:00

Bitdefender GravityZone provides full visibility into organizations' overall security posture, global security threats, and control over its security services that protect virtual or physical desktops, servers and mobile devices. All Bitdefender's Enterprise Security solutions are managed within the GravityZone through a single console, Control Center, that provides control, reporting, and alerting services for various roles within the organization.

This article is meant to explain how Endpoint Security detects other installed security products. The list of security software incompatible with Endpoint Security is also provided.

Overview
Best Practices
List of detected security software

Overview

Endpoint Security is incompatible with other antimalware, firewall or security software. Running Endpoint Security simultaneously with other security software on a computer may affect their operation and cause major problems with the system.

Before installation, be sure to uninstall existing antimalware and firewall software from the computers you want to protect with Endpoint Security.

Important: Windows security features (Windows Defender, Windows Firewall) will be automatically turned off before Endpoint Security installation is initiated.

To ease installation over existing security software, Endpoint Security automatically checks for and detects a large number of incompatible security programs at installation time (the list is provided below).

When installing Endpoint Security remotely, using the Install Client task from Control Center, the installer automatically attempts to uninstall any incompatible software detected. Many of the detected programs can be removed automatically, but some can not. After removing each detected program, the computer is restarted and installation resumes automatically.
When installing Endpoint Security locally, using the installation package from Control Center, the installer alerts you about any incompatible program detected and prompts you to uninstall it. You must follow the instructions to remove each detected program. A computer restart is required to complete the removal of detected programs. Installation will automatically resume after the computer restarts

If a detected program cannot be removed, the installer does not continue with the Endpoint Security installation, but sends an error message to Control Center. You can find details in the task report, which you can access from the Network > Tasks page by clicking the task name.

Detected programs cannot be removed in a number of particular situations:

If the program is protected with a password. In this case, you must first remove password protection.
When performing remote installation, in the following situations:

If the program cannot be removed silently (that is, without user interaction).
Some programs protected by a self-protect mechanism.

Best Practices

To ensure Endpoint Security installation goes smoothly and to avoid problems caused by incompatibility with other security software, follow these best practices:

If possible, make an inventory of all existing security software running on the organization's computers.
If your current security solution offers a convenient mass removal method (for example, remotely via a centralized management interface), it is recommended to use it.
Check the list of security software detected automatically when installing Endpoint Security. If you use security software that is not on this list, you must remove it manually prior to installing Endpoint Security.
If you know your current security solution is password-protected, make sure to remove password protection.
If you only have a few computers, it is best that you install Endpoint Security manually on each computer using the installation package. When performing local installation, the installer can remove any of the detected programs.
If you want to use remote installation, test it first on a couple of computers to make sure your existing security solution can be removed automatically. If automatic removal works, proceed to remotely install Endpoint Security on all computers.

List of detected security software

In the table below, you can find the list of security programs incompatible with Security for Endpoints that are detected automatically when installing Endpoint Security. If you use security software that is not on this list, you must remove it manually prior to installing Endpoint Security.

Note: This list is updated regularly.

Vendor	Product & Version*
Bitdefender	All Bitdefender products and version
AhnLab	ACA 1.0 for Windows
Ashampoo	Ashampoo Anti-Malware v.1.21
AVAST Software	avast! Internet Security avast! Pro Antivirus avast! Email Server Security avast! File Server Security
AVG Technologies	AVG 7 AVG 8 AVG 9 AVG 10 AVG 2012
Avira	Antivir PersonalEdition Classic Antivir PersonalEdition Premium Avira Antivirus Premium 2012 Avira Free Antivirus Avira Internet Security 2012 Avira Antivir Desktop Avira Antivir Proffesional
BullGuard	BullGuard
CA Technologies	eTrust Antivirus eTrust Suite Personal VETWIN32Vp5
Comodo	Comodo Internet Security Comodo Dragon Comodo GeekBuddy
DRWEB	DRWEB
ESET	ESET NOD32 Antivirus ESET Smart Security ESET Smart Security 4 ESET Smart Security 4.2 ESET NOD32 Antivirus v5 ESET NOD32 Antivirus Business Edition
F-Secure	F-Secure Anti-Virus 2010 F-Secure Internet-Security 2010 F-Secure Client Security - Web Traffic Scanning F-Secure Browsing Protection F-Secure Client Security - DeepGuard F-Secure Client Security - E-mail Scanning F-Secure Client Security - Internet Shield F-Secure Client Security - Virus & Spy Protection F-Secure Anti-Virus Client Security - Cisco NAC Plugin F-Secure Product 440 F-Secure PSB Workstation Security
G Data Software	G Data Antivirus 2011 G Data Antivirus 2012 G Data Antivirus 2013 G Data InternetSecurity 2011 G Data InternetSecurity 2012 G Data InternetSecurity 2013 G Data TotalProtection 2013 G Data TotalCare 2011 G Data TotalCare 2012
GFI Software	VIPRE Antivirus VIPRE Internet Security
Jiangmin	Jiangmin KV Antivirus 2007 KV Antivirus 2008
Kaspersky Lab	Kaspersky Lab Network Agent Kaspersky Anti-Virus 6.0 for Windows Workstations Kaspersky Anti-Virus 6.0 for Windows Servers Administration Tool of Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition Kaspersky Small Office Security Kaspersky Anti-Virus 2008 Kaspersky Anti-Virus 2009 Kaspersky Anti-Virus 2010 Kaspersky Anti-Virus 2011 Kaspersky Anti-Virus 2012 Kaspersky Internet Security 2008 Kaspersky Internet Security 2009 Kaspersky Internet Security 2010 Kaspersky Internet Security 2011 Kaspersky Internet Security 2012 Kaspersky Endpoint Security 8 for Windows Kaspersky PURE 2.0
Kingsoft	Kingsoft Internet Security 9 Kingsoft Internet Security 9 Plus
Lavasoft	Lavasoft Anti-Virus Helix Ad-Aware SE Enterprise Ad-Aware SE Personal Ad-Aware SE Plus Ad-Aware SE Professional Ad-Aware
Malwarebytes Corporation	MalwareBytes Anti-Malware version 1.61.0.1400
McAfee	McAfee Antispyware McAfee Personal Firewall Plus McAfee SpamKiller McAfee SecurityCenter McAfee Total Protection McAfee Rogue System Detection Sensor McAfee Agent McAfee Firewall Protection Service McAfee Browser Protection Service McAfee Virus and Spyware Protection Service McAfee SiteAdvisor Enterprise Plus McAfee Security Service for Exchange McAfee VirusScan Enterprise
MicroPoint	MicroPoint Proactive Defense Software
Microsoft	Microsoft Intune Microsoft Forefront Microsoft Security Essentials
Norman	Norman Ad-Aware Norman Security Suite Norman Virus Control
Panda Security	Panda Antivirus Lite Panda Antivirus Pro 2011 Panda Global Protection 2011 Panda Internet Security 2009 Panda Cloud Antivirus Panda Client Shield Panda Endpoint Agent Panda Endpoint Protection Panda Endpoint Security Panda Endpoint Security Agent Panda Security Toolbar Panda Security URL Filtering
PC Tools	PC Tools Internet Security 8.0 PC Tools Internet Security 9.0 PC Tools Firewall Plus 5.0 PC Tools Firewall Plus 6.0 PC Tools Firewall Plus 7.0
Prevx (subsidiary of Webroot)	Prevx
Qihoo	360 Safeguard
Sophos	Sophos Client Firewall Sophos Anti-Virus Sophos AutoUpdate Sophos Remote Management System
Symantec Corporation	Symantec Endpoint Protection Symantec Hosted Services Symantec Shared Symantec Hosted Services - Product Service Management Symantec Hosted Services - Tray Symantec Hosted Services - Platform Agent Symantec Hosted Services - Endpoint Protection Norton Antivirus Corporate Edition Norton 360 Norton Antivirus Norton Internet Security
Trend Micro	OfficeScan95 OfficeScanNT ServerProtect ServerProtect for NT ServerProtect IS Trend Micro Worry-Free Business Security Agent Trend Micro Worry-Free Business Security Standard Trend Micro Worry-Free Business Security Advanced Trend Micro Client/Server Security Agent Trend Micro Security Server Trend Micro Internet Security Pro 2009 Trend Micro Titanium Trend Micro Titanium 2011 Trend Micro Titanium 2012 Trend Micro Titanium Antivirus Plus 2011 Trend Micro Titanium Antivirus Plus 2012 Trend Micro Titanium Maximum Security 2011 Trend Micro Titanium Maximum Security 2012 Trend Micro Titanium Internet Security 2011 Trend Micro Titanium Internet Security 2012 Trend PC-cillin 7 Trend Micro OfficeScan Client
Webroot	Webroot Software Webroot SecureAnywhere
ZoneAlarm (Check Point Software Technologies)	ZoneAlarm Anti-virus ZoneAlarm Extreme Security ZoneAlarm Security Suite ZoneAlarm Pro ZoneAlarm

* The product names and versions displayed in the table are not necessarily the commercial ones. They are actually the names under which security programs or components thereof are listed in the Add or Remove Programs / Programs and Features utility from Windows Control Panel.

Upgrading to Bitdefender Client Security 3.6

BitDefender RSS (pr@bitdefender.com) — 2013-05-09T07:26:14+01:00

This article provides information on how to correctly upgrade from Bitdefender Client Security 3.5 to Bitdefender Client Security 3.6.

Bitdefender Client Security version 3.6 was released on the 30th of April 2013.

Overview
Upgrading Existing Bitdefender Client Security Deployments
Installing Bitdefender Client Security 3.6 In Environments Without Bitdefender Protection

Overview

Bitdefender Client Security 3.6 is a major upgrade to Bitdefender Client Security 3.5, which introduces a new client protection component, Endpoint Security.

Endpoint Security is a fully-automated computer security program, managed remotely by your network administrator. Once installed, it protects you against all kinds of malware (such as viruses, spyware and trojans), network attacks, phishing and data theft. It can also be used to enforce your organization's computer and Internet use policies.

Bitdefender Business Client is still available for installation on older operating systems, but it can only be installed by selecting the corresponding package in the Deployment Tool.

The information below is designed to help you correctly upgrade your Bitdefender Client Security 3.5 setup to Bitdefender Client Security 3.6.

Upgrading Existing Bitdefender Client Security Deployments

To upgrade your existing Bitdefender Client Security deployments to version 3.6, you need to upgrade the Bitdefender Management Console first and then upgrade the existing Bitdefender Business Client installations.

Upgrading Bitdefender Management Console
To upgrade your existing Bitdefender Management Console installation to version 3.6, download and run the patch from the link below:

Download Bitdefender Client Security 3.6 Upgrade Patch

Running the patch will upgrade Bitdefender Management Console and add the installation packages for Endpoint Security.

The patch is silent and does not require any user interaction.The upgrade takes a few minutes to complete. When the upgrade is complete, a confirmation message will be displayed.

Note: Running maintenance operations (repair, uninstall or reinstall) after installing the patch will revert the Bitdefender Management Console installation to version 3.5.

You can also upgrade to Bitdefender Client Security 3.6 by downloading and running the full installation kit from the address below without uninstalling Bitdefender Client Security 3.5.

Download Bitdefender Client Security 3.6 Full Installation Kit

Important: The Bitdefender Client Security 3.6 full installation kit also contains the latest version of Bitdefender Security for File Servers.
Upgrading Bitdefender Business Client installations to Endpoint Security
After upgrading Bitdefender Management Console to version 3.6, the installation packages for Endpoint Security will be added to the Deployment Tool.

Use the Deployment Tool to install Endpoint Security on the computers protected by Bitdefender Business Client.

If a target computer meets the requirements of Endpoint Security, the existing security product (including Bitdefender Business Client) will be removed and Endpoint Security will be installed after the computer is restarted.

Important: By default, the Endpoint Security Installation will reboot the target machine after uninstalling the existing security product. If the option Do not reboot target computers is checked in the Deployment Tool, the existing security product will be uninstalled, but Endpoint Security will not be installed until the target computer is manually rebooted.

The deployment process will reside in the system’s memory and will continue to use its resources until the system is rebooted.

If a target computer does not meet the requirements of Endpoint Security or the existing security product is not detected by the installer, no action will be taken and the existing security product will not be removed.

For a list of detected security products, refer to Removing Security Products Incompatible with Endpoint Security.

Installing Bitdefender Client Security 3.6 In Environments Without Bitdefender Protection

To install Bitdefender Client Security 3.6 in environments that are not protected by Bitdefender Client Security 3.5, download and run the full installation kit from the link below:

Download Bitdefender Client Security 3.6 Full Installation Kit

Important: The Bitdefender Client Security 3.6 full installation kit also contains the latest version of Bitdefender Security for File Servers.

After installing Bitdefender Client Security 3.6, you must first install Bitdefender Management Agent on the target computers and then install Endpoint Security through any of the available methods:

Deployment Tool
Automatic Deployment
Network Builder
Policy Deployment

By default, Bitdefender Client Security will try to install Endpoint Security on all the target computers.

For computers that do not meet the requirements of Endpoint Security, use the Deployment Tool to install Bitdefender Business Client.

Installing Security for Mobile Devices

BitDefender RSS (pr@bitdefender.com) — 2013-05-10T13:33:23+01:00

This article explains how to configure Mobile Devices Security in GravityZone by adding mobile devices to users in Control Center and by installing the Mobile Client application on corresponding devices.

Overview
Security for Mobile Devices Prerequisites
Creating custom users
Adding mobile devices to users in Control Center
Installing GravityZone Mobile Client on devices

Overview

GravityZone Security for Mobile Devices provides a unified enterprise-grade management of iPhone, iPad and Android devices connected to a corporate network by real-time scanning and enforcing organization’s security policies on any number of devices.

To manage the security of mobile devices used in your company, first you have to associate them to specific users in Control Center, then install and activate the Mobile Client application on each of them.

Security for Mobile Devices Prerequisites

To manage mobile devices from GravityZone Control Center, the following conditions must be satisfied:

Configure Communication Server with a public (external) address
Add the iOS Management Certificates to the Control Center root account:
- Communication Server Certificate, needed to secure communication between the Communication Server and iOS mobile devices.
- Apple MDM Push certificate, required to ensure secure communication between the Communication Server and the Apple Push Notifications service (APNs) servers when sending push notifications.
- iOS MDM Trust Chain Certificates, needed to ensure that iOS mobile devices trust the Communication Server certificate and the iOS MDM Identity and Profile Signing certificate.
Add mobile devices to users in Control Center. Supported mobile devices:
- Apple iPhones and iPad tablets (iOS 5.1+)
- Google Android smartphones and tablets (2.2+)
Install and activate GravityZone Mobile Client application on mobile devices.
Mobile devices must have a cellular data signal and connectivity with the Communication Server.
Note: If your company uses a firewall that restricts the Internet traffic, it is required to configure it to allow connectivity with GCM / APN services. iOS devices require a direct internet connection to receive push notifications from Apple's server. iOS devices cannot connect to Apple Push Notification service using a Wi-Fi network with a proxy server.
For Android devices to communicate with Google Cloud Messaging (GCM) service:
- Google Play Store must be installed
- Devices running a version lower than Android 4.0.4 must also have at least one logged in Google account
A number of ports must be open for sending push notifications.

Creating Custom Users

To include mobile devices in GravityZone management, you have to associate them to existing users in Control Center. You can add mobile devices to available Active Directory users. If integration with Active Directory is unavailable, you will have to create custom users first. Either way, you can anytime define custom users as owners of mobile devices connected to your company network.

To create custom users:

Go to the Network page.
From the menu in the upper-right corner of the page, choose Mobile Devices.
In the left-side pane, select Custom Groups.
Click the Add User icon on the action toolbar. A configuration window will appear.
Specify the required user details.
- A suggestive username (for example, the user's full name)
- User's email address
  Important: Make sure to provide a valid email address. The user will be sent the installation instructions by email when you add a device.
  Note: Each email address can only be associated with one user.
Click OK.

Adding mobile devices to users in Control Center

You can add an unlimited number of mobile devices to each user. You can only add one device to one specific user at a time.

To add a device to a specific user:

Go to the Network page.
From the menu in the upper-right corner of the page, choose Mobile Devices.
Search for the user in the Active Directory folders or in Custom Groups and select the corresponding check box in the right-side pane.
Click the Add Device icon at the right-side of the table. A configuration window will appear.
Configure the mobile device details:
- Enter a suggestive name for the device.
- Select the device ownership type (enterprise or personal). You can anytime filter mobile devices by ownership and manage them according to your needs.
- The configuration window displays the unique activation token assigned to the device and the communication server address, as well as the corresponding QR code, required for activating the mobile device, after the Mobile Client installation.
  Note: If you are going to install the Mobile Client on the user's device, proceed to that without closing this window. After installation, when prompted to activate the device, enter the activation token and the communication server address or scan the provided QR code.
Click OK. The user is immediately sent an email with the installation instructions and the activation details to be configured on the device. The activation details include the activation token and the communication server address (and corresponding QR code).
Note: You can anytime view the device activation details by clicking its name in Control Center.

You can check the number of devices assigned to each user in the right-side pane, under Devices column.

Installing GravityZone Mobile Client on Devices

Mobile devices can be enterprise-owned or personally-owned. You can install and activate Mobile Client on each mobile device, then hand it to the corresponding user. Users can also install and activate Mobile Client by themselves, following the instructions received by email.

The Mobile Client application is exclusively distributed via Apple App Store and Google Play.

To install Mobile Client on a device:

Search for the application on the official app store:
- Google Play
- Apple Store
Download and install the application on the device.
Start the application.
Make the required configuration:
1. Tap Activate to enable GravityZone as device administrator. Read carefully the provided information.
2. Enter the activation token and the communication server address or, alternatively, scan the corresponding QR code.
  Note: Activation information is available from Control Center in the mobile device's details and also in the email received by user.
3. Click Activate.
4. On iOS devices, you are prompted to install the MDM profile. Follow the on-screen instructions to complete profile installation.

Once the installation is complete, you can view managed mobile devices in the GravityZone Control Center, under corresponding users. Click the number of devices associated to the user you are interested in to display the list of attached mobile devices.

Installing GravityZone Security for Virtualized Environments

BitDefender RSS (pr@bitdefender.com) — 2013-04-26T15:27:02+01:00

This article is meant to help you correctly install Security for Virtualized Environments in your network.

Overview
Installing Security Server on hosts
Installing BDTools Using Installation Tasks
Installing BDTools Using Installation Packages

Overview

To protect your virtual machines with Security for Virtualized Environments, you must install at least one Security Server in your virtual environment and BDTools (the client software) on the virtual machines you want to protect.

Security Server is a dedicated virtual machine that de-duplicates and centralizes most of the antimalware functionality of antimalware clients, acting as a scan server.

You must install Security Server on hosts as follows:

In VMware environments with vShield Endpoint, you must install the purpose-built appliance on each host to be protected. All virtual machines on a host are automatically connected via vShield Endpoint to the Security Server instance installed on that host. For VMware environments with vShield Endpoint, you can deploy Security Server on hosts exclusively via installation tasks.
In all other environments, you must install Security Server on one or more hosts so as to accommodate the number of virtual machines to be protected. You must consider the number of protected virtual machines, resources available for Security Server on hosts, as well as network connectivity between Security Server and protected virtual machines. The BDTools installed on virtual machines connects to Security Server over TCP/IP, using details configured at installation or via a policy.

BDTools is the component to be installed on the virtual machines you want to protect.

In VMware vSphere environments, Security for Virtualized Environments can integrate with VMware vShield Endpoint to provide agentless protection for Windows virtual machines. All virtual machines on a host are automatically connected via vShield Endpoint to the Security Server instance installed on that host. Optionally, you can deploy the BDTools on Windows virtual machines to take advantage of the additional functionality it provides:

Allows you to run Memory and Process Scan tasks on the machine
Informs the user about the detected infections and actions taken on them

BDTools can be installed on the targeted computers either by deploying it from the Control Center or by downloading the needed installation package and running it manually on the targeted virtual machines.

Installing Security Server on Hosts

Installing Security Server in VMware environments integrated with vShield Endpoint:

Log in to the Control Center
Go to the Network page
Choose Virtual Machines from the service selector
Select the datacenter or folder containing the host on which you want to install the Security Server from the left-side pane. All the hosts and clusters from the selected location are displayed in the right-side pane table
Select the check box corresponding to the host on which you want to install the Security Server
Click the Tasks button at the right-side of the table and choose Install Security Server
Enter a suggestive name for the Security Server
Configure the Security Server settings according to your environment
Click Save to create the task. A confirmation message will appear

Note:The Security Server packages are not included by default in the GravityZone appliance. Depending on the settings made by the root administrator, the Security Server package necessary for your environment will either be downloaded when a Security Server install task is launched or the administrator will be notified about the missing image and the installation will not proceed. If the package is missing, the root administrator will have to manually download it before the installation is possible.

Installing Security Server in other environments:

Log in to the Control Center
Go to the Network > Packages page
Select Default Security Server Package
Click the Download button at the right side of the table and select the version of Security Server to install according to your virtual environment. Depending on your browser settings, the file may be downloaded automatically to a default download location.
Use your virtualization management tool (for example, vSphere Client) to import the Security Server image into your virtual environment.

Installing BDTools using Installation Tasks

To remotely install the Security for Virtualized Environments protection on one or several detected virtual machines:

Log in to the Control Center
Go to the Networkpage.
Choose Virtual Machines from the service selector
Select the desired group from the left-side pane. All virtual machines from the selected group are displayed in the right-side pane table
Apply filters to display unmanaged virtual machines only. Click the filters button and select the following options in each category: Unmanaged, Show all VMs recursively and Show all VMs
Select the check boxes corresponding to the virtual machines on which you want to install protection
Click the Task button at the right-side of the table and choose Install client. The BDTools Installation window is displayed
Configure the BDTools settings according to your environment
Under the Credentials tab, specify the administrative credentials required for remote authentication on selected computers. If you have not already defined the credentials in the Credentials manager, add the required administrator accounts as follows:
- Enter the user name and password of an administrator account for each of the selected virtual machines in the corresponding fields. Optionally, you can add a description that will help you identify each account more easily. If virtual machines are in a domain, it suffices to enter the credentials of the domain administrator. Use Windows conventions when entering the name of a domain user account (for example, domain\user or user@domain.com)
- Click the corresponding Add button. The new account is added to the credentials manager.
- Select the check box corresponding to the account you want to use
Click Save. A confirmation message will appear
You can view and manage the task on the Network > Tasks page

Installing BDTools using Installation Packages

To install BDTools using an installation package:

Log in to the Control Center
Go to the Network > Packages page
Select Default BDTools Package
Click the Download button at the right side of the table and select the version of BDTools to install according to your virtual environment. Depending on your browser settings, the file may be downloaded automatically to a default download location
Run the installation package on the target virtual machine