Skip to main content

ON PREMISES SOLUTIONS

Security agents

To protect your network with Bitdefender, you must install the appropriate GravityZone security agents on network endpoints.

  • Bitdefender Endpoint Security Tools

  • Endpoint Security for Mac

  • GravityZone Mobile Client

Bitdefender Endpoint Security Tools

GravityZone ensures Windows and Linux physical and virtual machines protection with Bitdefender Endpoint Security Tools, an intelligent environment-aware security agent which adapts to the endpoint type. Bitdefender Endpoint Security Tools can be deployed on any machine, either virtual or physical, providing a flexible scanning system, being an ideal choice for mixed environments (physical, virtual and cloud).

In addition to file system protection, Bitdefender Endpoint Security Tools also includes mail server protection for Microsoft Exchange Servers.

Bitdefender Endpoint Security Tools uses one single policy template for physical and virtual machines, and one installation kit source for any environment (physical or virtual) running Windows or Linux.

Features

The following protection features are available with Bitdefender Endpoint Security Tools:

Roles

Note

Some features and roles are only available with certain GravityZone commercial packages. For details, refer to this comparison page.

Power User

Control Center administrators can grant Power User rights to endpoint users via policy settings. The Power User module enables administration rights at user level, allowing the endpoint user to access and modify security settings via a local console. Control Center is being notified when an endpoint is in Power User mode and the Control Center administrator can always overwrite local security settings.

Important

This module is available only for supported Windows desktop and server operating systems.

Relay

Endpoint agents with Bitdefender Endpoint Security Tools Relay role serve as communication proxy and update servers for other endpoints in the network. Endpoint agents with relay role are especially required in organizations with isolated networks, where all traffic is made through a single access point.

In companies with distributed networks, relay agents help lowering the bandwidth usage, by preventing protected endpoints and security servers to connect directly to the GravityZone appliance.

Once a Bitdefender Endpoint Security Tools Relay agent is installed in the network, other endpoints can be configured via policy to communicate with Control Center through the relay agent.

Bitdefender Endpoint Security Tools Relay agents serve for the following purposes:

  • Discovering all unprotected endpoints in the network.

  • Deploying the endpoint agent inside the local network.

  • Updating protected endpoints in the network.

  • Ensuring the communication between Control Center and connected endpoints.

  • Acting as proxy server for protected endpoints.

  • Optimizing the network traffic during updates, deployments, scanning and other resource-consuming tasks.

Patch Caching Server

Endpoints with Relay role may also act as a Patch Caching Server. With this role enabled, Relays serve for storing software patches downloaded from vendor's websites, and distributing them to target endpoints in your network. Whenever a connected endpoint has software with missing patches, it takes them from the server and not from the vendor's website, thus optimizing the traffic generated and the network bandwidth load.

Important

This additional role is available with a registered Patch Management add-on.

Exchange Protection

Bitdefender Endpoint Security Tools with Exchange role can be installed on Microsoft Exchange Servers with the purpose of protecting the Exchange users from email-borne threats.

Bitdefender Endpoint Security Tools with Exchange role protects both the server machine and the Microsoft Exchange solution.

Endpoint Security for Mac

Endpoint Security for Mac is a security agent designed to protect Macintosh workstations and laptops with Intel or Apple M-series processors. The scanning technology available is Local Scan, with security content stored locally.

Features

The following protection features are available with Endpoint Security for Mac:

GravityZone Mobile Client

GravityZone Mobile Client extends security policies with ease to on any number of Android and iOS devices, protecting them against unauthorized usage, riskware and loss of confidential data.

Security features include screen lock, authentication control, device location, remote wipe, detection of rooted or jailbroken devices and security profiles. On Android devices the security level is enhanced with real-time scanning and removable media encryption.

GravityZone Mobile Client is exclusively distributed via Apple App Store and Google Play.