Directly contact our Support Team

Bitdefender GravityZone (cloud console) Communication Ports

The following table provides information on the ports used by Bitdefender GravityZone (cloud console) components:

Component   Direction   Port   Source / Destination   Description
Web Console   Inbound   80 (HTTP)   Any   Access to the Control Center web console, redirect to 443
443 (HTTPS) Any Access to the Control Center web console
Security agent   Outbound   80   submit.bitdefender.com   Port used for submitting endpoint dumps in case of crashes
upgrade.bitdefender.com
update.cloud.2d585.cdn.bitdefender.net
The official Bitdefender update servers
lv2.bitdefender.com License validation
53 *.v1.bdnsrt.org DNS requests for signature update checks
389 (LDAP) Domain Controller Integration with Active Directory (for Active Directory Integrator only)
636 (LDAPS)
3268 Domain Controller Global Catalog
3269
7074 Update Server Downloading updates from Update Server
Relay agent (if available) - Downloading installation packages in the deployment phase from the Relay agent
- Communication messages received from endpoints linked to the Relay agent
7076 Bitdefender Cloud Servers:
nimbus.bitdefender.net/elam/blob
Encrypted communication messages (when the Relay agent is used as a proxy)
443 cloud.gravityzone.bitdefender.com
cloudgz.gravityzone.bitdefender.com
Downloading installation packages during deployment  (Setup Downloader)
cloud-ecs.gravityzone.bitdefender.com
cloudgz-ecs.gravityzone.bitdefender.com
Link between the security agents and Communication Server
nimbus.bitdefender.net/elam/blob Early Launch Anti-Malware (ELAM) cloud server
nimbus.bitdefender.net Antimalware, antiphishing and content control scanning with Bitdefender Cloud Servers
Inbound N/A N/A N/A
Relay agent   Outbound   80   submit.bitdefender.com   Port used for submitting endpoint dumps in case of crashes
upgrade.bitdefender.com
update.cloud.2d585.cdn.bitdefender.net
The official Bitdefender update servers
lv2.bitdefender.com License validation
53 *.v1.bdnsrt.org DNS requests for signature update checks
389 Domain Controller Integration with Active Directory (for Active Directory Integrator only)
7074 Update Server Downloading updates from Update Server
Relay agent(*) (if available)
download.bitdefender.com
- Downloading installation packages in the deployment phase from the Relay agent
- Communication messages received from endpoints linked to the Relay agent
7076 Bitdefender Cloud Servers:
nimbus.bitdefender.net/elam/blob
Encrypted communication messages received from endpoints linked to the Relay agent
443 cloud.gravityzone.bitdefender.com
cloudgz.gravityzone.bitdefender.com
Downloading installation packages during deployment  (Setup Downloader)
cloud-ecs.gravityzone.bitdefender.com
cloudgz-ecs.gravityzone.bitdefender.com
Link between the Relay agent and Communication Server
nimbus.bitdefender.net/elam/blob Early Launch Anti-Malware (ELAM) cloud server
nimbus.bitdefender.net Antimalware, antiphishing and content control scanning with Bitdefender Cloud Servers
download.bitdefender.com Downloading installation packages before deployment from the GravityZone Cloud Control Center
Inbound 7074 Security agent Communication messages (such as settings and events) received from endpoints linked to Relay
7076 Bitdefender Cloud Servers:
nimbus.bitdefender.net/elam/blob
Encrypted communication messages received from endpoints linked to the Relay agent
Security Server (Multi-Platform)   Outbound   443   nimbus.bitdefender.net   Periodical verification of antimalware detections with Bitdefender Cloud Servers
cloud-ecs.gravityzone.bitdefender.com
cloudgz-ecs.gravityzone.bitdefender.com
Link between Security Server and Communication Server
7074 Update Server Downloading updates from Update Server
Inbound 7081 Any Antimalware traffic scanning sent by the security agent (BEST)
7083 Any Antimalware traffic scanning sent by the security agent (BEST) over SSL
Sandbox Analyzer   Both   443   Sandbox Analyzer Portal   Allows communication between the endpoint and the Sandbox Analyzer Portal.
Handles file submission to sandbox-portal.gravityzone.bitdefender.com.

(*) Since the relay is an update server that needs to listen all the time on a port, Bitdefender provides a mechanism able to automatically open a random port on localhost (127.0.0.1), so that the update server can receive proper configuration details. This mechanism applies when the default port 7074 is used by another application. In this case, the update server tries to open the 7075 port to listen on localhost. If 7075 port is also unavailable, the update server will search for another port that is free (in range of 1025 to 65535) and successfully bind to listen on localhost.

Can't find a solution for your problem? Open an email ticket and we will answer the question or concern in the shortest time possible.

Rate this article:

Submit