This guide helps you set up Bitdefender GravityZone (GZ) to provide robust defense against malware and ransomware while managing endpoints through a single pane of glass.

Step 1: Set Up the Integration 

The Bitdefender GravityZone integration provides a robust, multi-layered defense against cyber threats with minimal system impact. It allows you to automatically deploy antivirus to assets by simply enabling it within your Syncro policies and grants access to the full GravityZone portal for managing premium features like EDR, Mobile Security, and Risk Management.

You can provision a new trial account directly through Syncro or connect an existing North American Bitdefender account.

1. Navigate to Admin > App Center and select the Bitdefender tile.
2. Click Provision Trial Account (or connect your existing account).
3. Check your email for GZ login credentials, log in, and navigate to My Account > API Keys.
4. Generate a new API Key with all checkboxes enabled.
5. Paste this key back into the Syncro App Center settings.

 Provision your account (or link an existing one) and save your GZ API Key in Syncro. (Use Bitdefender GravityZone or Bitdefender Trials for help.)

Step 2: Review HyperDetect/ATS Settings 

Advanced Threat Security (HyperDetect) features aggressive tunable machine learning to protect against targeted file-less attacks, ransomware, and exploits. While powerful, this is a billable add-on managed entirely within GravityZone. To avoid unexpected charges, you must ensure this is disabled in your GZ policies unless you specifically intend to sell this advanced protection to a client.

 Log into GravityZone, check your Default Policy, and ensure HyperDetect and Sandbox Analyzer are disabled. (Refer to Assign Bitdefender to a Policy & Verify Settings as necessary.)

Step 3: Deploy Bitdefender via Syncro Policy 

While detailed settings are managed in GZ, the initial deployment and module selection happen in Syncro.

1. Navigate to Policies in Syncro and open a policy.
2. Select Antivirus and choose Bitdefender.
3. Select the core modules to install (e.g., Firewall, Content Control). 
   Note: Changing these later requires a reconfigure task in GZ, not just a Syncro policy update.

 Add Bitdefender to a test Policy in Syncro and enable the Firewall module. (Refer to Assign Bitdefender to a Policy & Verify Settings as necessary.)

Step 4: Configure GravityZone Policies 

Once deployed, the specific behavior of the AV (like scan schedules and exclusions) is controlled entirely inside the GravityZone portal. The default GZ policy often has the Firewall set to block network printing and lacks a scheduled scan. You should clone the default policy to make these edits.

 In GravityZone, clone the Default Policy, rename it, and add a Scan Schedule (Antimalware > On-Demand). (Refer to Assign Bitdefender to a Policy & Verify Settings as necessary.)

Step 5: Assign Policies in GravityZone 

After creating your custom GZ policy (Step 4), you must assign it to your endpoints.

1. In GZ, navigate to the Network tab.
2. Select the Company or specific endpoints.
3. Click Assign Policy and select your new custom policy.

 Assign your custom GZ policy to the endpoint you deployed in Step 3. (See Manage Endpoints in the GravityZone Portal for help.)

Step 6: Manage Add-Ons and Removal 

You can enable premium add-ons (like Encryption or Email Security) for specific clients within GZ under Companies > Licensing. If you need to remove Bitdefender, you should initiate the Uninstall Agent task from the GZ Network tab to ensure the license is freed up immediately. (Note: Verify that your Syncro Policy is not set to redeploy Bitdefender, otherwise it will be reinstalled again right after it uninstalls!)

Watch this short video to learn more:

 Navigate to the Network tab in GZ and locate the Uninstall Agent task (do not run it unless you are ready to remove the AV). (See Manage Endpoints in the GravityZone Portal for help.)

Step 7: Important Troubleshooting Rules 

To ensure the integration works smoothly, follow these rules:

• Do not rename Syncro-created Companies in GZ; this breaks the link between the Syncro Asset and GZ Endpoint.
• Do not delete installation packages in GZ starting with "SYN"; these are required for auto-deployment.
• If an install fails, ensure other AVs (like Webroot or Malwarebytes) are fully removed and try rebooting the asset.

 Check your Installation Packages in GZ to verify you see packages prefixed with SYN. (See Troubleshooting Bitdefender for more information.)