Directly contact our Support Team

Bitdefender GravityZone (cloud console) Communication Ports

The following table provides information on the ports used by Bitdefender GravityZone (cloud console) components:

Component Direction Port Source / Destination Description
Web Console 
(Control Center)
Inbound 80 (HTTP) Any Access to the Control Center web console, redirect to 443
443 (HTTPS) Any Access to the Control Center web console

Security Agent (BEST, BEST Legacy, Endpoint Security, Endpoint Security for Mac)

Outbound 80 submit.bitdefender.com Port used for submitting endpoint dumps in case of crashes
upgrade.bitdefender.com
update.cloud.2d585.cdn.bitdefender.net

Downloading updates from the online Bitdefender Update Servers (the official repository)

 

lv2.bitdefender.com License validation
53 *.v1.bdnsrt.org DNS requests for signature update checks
389 (LDAP) Active Directory Domain Controller

Integration with Active Directory (only for the endpoint which has the role of Active Directory Integrator)

 

636 (LDAPS)
3268 Domain Controller Global Catalog
3269
7074 GravityZone Update Server Downloading updates from GravityZone Update Server
Relay agent (if available) - Downloading installation packages in the deployment phase from the Relay agent
- Communication messages received from endpoints linked to the Relay agent
7076 Bitdefender Global Protective Network:
nimbus.bitdefender.net/elam/blob
Encrypted communication messages (when the Relay Agent is used as a proxy)
443 cloud.gravityzone.bitdefender.com
cloudgz.gravityzone.bitdefender.com
Downloading installation packages during deployment  (Setup Downloader)
cloud-ecs.gravityzone.bitdefender.com
cloudgz-ecs.gravityzone.bitdefender.com
Link between the security agents and Communication Server
nimbus.bitdefender.net/elam/blob Early Launch Anti-Malware (ELAM) cloud server
nimbus.bitdefender.net

Antimalware, antiphishing and content control scanning with Bitdefender Global Protective Network

Relay agent Inbound 7074 Security agent Communication messages (such as settings and events) received from endpoints linked to the Relay Agent
7076 Bitdefender Global Protective Network:
nimbus.bitdefender.net/elam/blob
Encrypted communication messages received from endpoints linked to the Relay Agent
Outbound 80 submit.bitdefender.com Port used for submitting endpoint dumps in case of crashes
upgrade.bitdefender.com
update.cloud.2d585.cdn.bitdefender.net
Downloading updates from the online Bitdefender Update Servers (the official repository)
lv2.bitdefender.com License validation
53 *.v1.bdnsrt.org DNS requests for signature update checks
389 Active Directory Domain Controller Integration with Active Directory (only for the endpoint which has the role of Active Directory Integrator)
7074 Update Server Downloading updates from GravityZone Update Server
Relay agent(*) (if available) - Downloading installation packages in the deployment phase from another Relay Agent
- Communication messages received from endpoints linked to the Relay Agent
download.bitdefender.com

Downloading installation packages from the online Bitdefender Update Servers

7076 Bitdefender Cloud Servers:
nimbus.bitdefender.net/elam/blob
Encrypted communication messages received from endpoints linked to the Relay agent
443 cloud.gravityzone.bitdefender.com
cloudgz.gravityzone.bitdefender.com
Downloading installation packages during deployment  (Setup Downloader)
cloud-ecs.gravityzone.bitdefender.com
cloudgz-ecs.gravityzone.bitdefender.com
Link between the Relay agent and Communication Server
nimbus.bitdefender.net/elam/blob
Early Launch Anti-Malware (ELAM) cloud server, a component of Bitdefender Global Protective Network
nimbus.bitdefender.net Antimalware, antiphishing and content control scanning with Bitdefender Cloud Servers
download.bitdefender.com Downloading installation packages before deployment from the GravityZone Cloud Control Center
Security Server (Multi-Platform) Inbound 1344 Any
Used by Security for Storage protection layer for communication between NAS devices compliant with ICAP and Security Server
6379 Security Server Allows traffic between Security Servers.
7081 Any Antimalware traffic scanning sent by the Security Agent
7083 Any Antimalware traffic scanning sent by the Security Agent over SSL
Outbound 443 nimbus.bitdefender.net Periodical verification of antimalware detections with Bitdefender Cloud Servers
cloud-ecs.gravityzone.bitdefender.com
cloudgz-ecs.gravityzone.bitdefender.com
Link between Security Server and Communication Server
80

upgrade.bitdefender.com

Fallback for downloading updates from the Bitdefender Update Servers (the official Bitdefender repository)

7074 Update Server Downloading updates from GravityZone Update Server
Sandbox Analyzer Both 443 Sandbox Analyzer Portal Allows communication between the endpoint and the Sandbox Analyzer Portal.
Handles file submission to sandbox-portal.gravityzone.bitdefender.com.

(*) Since the relay is an update server that needs to listen all the time on a port, Bitdefender provides a mechanism able to automatically open a random port on localhost (127.0.0.1), so that the update server can receive proper configuration details. This mechanism applies when the default port 7074 is used by another application. In this case, the update server tries to open the 7075 port to listen on localhost. If 7075 port is also unavailable, the update server will search for another port that is free (in range of 1025 to 65535) and successfully bind to listen on localhost.

Can't find a solution for your problem? Open an email ticket and we will answer the question or concern in the shortest time possible.

Rate this article:

Submit