Skip to main content


The Firewall controls applications' access to the network and to the Internet. Access is automatically allowed for a comprehensive database of known, legitimate applications. Furthermore, the firewall can protect the system against port scans, restrict ICS and warn when new nodes join a Wi-Fi connection.


Firewall uses the following components:

  • GravityZone Control Center

  • Security agent (Bitdefender Endpoint Security Tools installed on Windows endpoints)

Install and configure the Firewall feature

To start using this feature, follow the steps below:


If your endpoints already have the BEST agent deployed, but the Firewall module is not installed, you can use a Reconfigure agent task to add the module to the endpoint.

If no agent is installed, you will need to use an installation package to deploy BEST on your endpoints along with all required modules.

Below we have included both procedures.

Test out the Firewall feature

This module allows to to manage, restrict and otherwise control an endpoint's contact with internal and external connections.