Already a NinjaOne customer? Log in to view more guides and the latest updates.

NinjaOne Integrations: Getting Started with Bitdefender GravityZone

Topic

This article describes the Bitdefender GravityZone Integration and the steps required to set it up in your NinjaOne instance.

Environment

  • NinjaOne Integrations
  • Bitdefender GravityZone

Description

Bitdefender is a state-of-the-art security solution that can protect your customer endpoints from multiple angles. It provides consolidated risk analytics, device hardening, next-generation antivirus, Endpoint Detection and Response (EDR), and Managed Detection and Response (MDR) in a single platform. With an extensive API and comprehensive task automation, Bitdefender reduces costs and significantly enhances your security posture.

The integration enables you to use the NinjaOne console to view and manage quarantined, active, and blocked threats found by Bitdefender GravityZone on your Microsoft Windows or Apple macOS endpoints. Quick access options empower you to take immediate actions directly within NinjaOne or click through to the impacted endpoint in the GravityZone application to perform more comprehensive triage.

NinjaOne integrates with GravityZone, which configures with the API and uses the Software Development Kit (SDK), built in at the policy level. For information about Bitdefender SDK, refer to Bitdefender SDK: Integration Guide.

View additional tutorials in our video library

Index

Select a category to learn more:

Prerequisites

Before enabling the integration, you must familiarize yourself with the following environmental requirements and considerations.

Licensing

In NinjaOne, you can control which devices will install Bitdefender GravityZone through policy assignments. Refer to the section within this article titled Deploy the GravityZone Policy to Machines to learn how.

Note the following requirements for using Bitdefender GravityZone with NinjaOne:

  • You cannot use trial licenses to deploy agents with the Bitdefender GravityZone integration in NinjaOne. Your account must be on a monthly subscription.
  • The NinjaOne account email you use for the integration must match the GravityZone account email.
  • You must have an additional partner account.

You must access the GravityZone portal to view the following items, as they are not available in NinjaOne:

  • License add-ons and their allocation to companies.
  • Active licenses per company.
  • Endpoint licenses per add-on.

Bitdefender GravityZone provides help guides for calculating the endpoint license usage through reports; refer to Use cases | Bitdefender (external link) for more information. You can also monitor license status through notifications on the Bitdefender GravityZone portal; refer to Notifications | Bitdefender (external link) for more information.

Permissions

Only system administrators can enable the Bitdefender GravityZone Integration. Once enabled, technicians with the appropriate permissions can access administrative controls or run GravityZone scans on devices.

To grant the technician permission, open their account page or role, select System, and manage the options for GravityZone Admin and GravityZone Scan Options. For more information about permissions, refer to NinjaOne Platform: Permission Settings for Technicians.

Compatibility

Refer to the following notes to learn about compatibility requirements for this integration.

  • The GravityZone Active Directory module is incompatible with the NinjaOne GravityZone integration.
  • The GravityZone integration is only compatible with Windows and macOS devices.
  • NinjaOne does not support ARM-based processors when deploying installations.

Networking Allowlist Requirements

You must add https://gravityzone.bitdefender.com/ to your networking allowlist so the NinjaOne agent can download the GravityZone installer.

For more details, refer to Global Allowlist (Whitelist) Information.

Software Development Kit Limitations

If you use the SDK Bitdefender integration, be aware of the following:

  • The Bitdefender SDK uninstalls automatically during the GravityZone setup process. When the policy settings change, NinjaOne will try to uninstall the SDK and install GravityZone. If NinjaOne fails to remove the Bitdefender SDK, we recommend that you uninstall it manually before attempting the Bitdefender GravityZone installation on the device again. To learn more about policy settings, refer to the section Deploy the GravityZone Policy to Machines.
  • The configured Bitdefender SDK policy settings will not transfer to the GravityZone policy setting configuration.

Bitdefender GravityZone Accounts Provisions

GravityZone accounts provision to the region matching the NinjaOne account, as shown in the table below.

NinjaOne InstanceGravityZone Instance
EUEU
OCEU
NAUSA
NA2USA
CAUSA

The integration will break if you are migrating your account from one region to another. You must uninstall all devices and obtain a new GZ console in your new account region.

If you use an existing GravityZone license not provisioned through NinjaOne, you must move it into the NinjaOne Tenancy. To do so, perform the following steps:
  1. From the GravityZone console, click the account drop-down menu at the top of the page and select My Company.
  2. The My Company configuration page displays. Open the Licensing tab. Then, click Change Partner.
  3. Refer to the provisioning table to determine your GravityZone instance.
  4. Enter the corresponding value in the Change partner Partner company Company hash field.
    • EU: 9edf6ce203ea6227fb2b8ac6adf6877c
    • USA: 3fa11f8c08b045e13c7bb90aefa1d6ff
  1. Click the Change Partner button again to confirm and save.

For more details, refer to Changing a managed company's subscription as an MSP Partner — Bitdefender Support Center (external link).

Enable the Bitdefender GravityZone Integration

Once you've provisioned your Bitdefender GravityZone account, you must enable the integration in NinjaOne by completing the following workflow:

  1. In NinjaOne, navigate to Administration Apps Installed. Then, click Add Apps.
admin_apps_add app.png
Figure 1: Enable a third-party integration in NinjaOne
  1. The Add Apps modal appears. Locate and click the Bitdefender GravityZone app.
  2. When the Confirm app addition pop-up dialog appears, click Continue to add the app.
  3. The system will add the app in a deactivated state. Click Enable in the top right corner to continue the setup.
  4. Once you have enabled GravityZone, select whether you would like to set up a new account or integrate an existing one.

Set Up a New GravityZone Account

  1. After you complete the steps above, the Bitdefender GravityZone setup window will open. Select Setup new GravityZone account.
  2. Input your NinjaOne account email in the text field and click Next.
  3. Follow the prompts to verify your identity, and then click Done in the account creation confirmation modal.
  4. Proceed to this article's Mappings section.

Connect An Existing GravityZone Account

  1. After you complete the steps to enable the integration above, the Bitdefender GravityZone setup window will open. Select Integrate with existing GravityZone account.
  2. Paste your Company ID from the Bitdefender GravityZone console.

To obtain your GravityZone Company ID, perform the following steps:

  1. From the GravityZone console, click your account name and select My Company from the drop-down menu.
  2. Open the Licensing tab and click the paper icon on the right side of the Company ID field to copy the data.

To enable the integration with NinjaOne, you must select the Management Permissions checkbox in the Company Details tab on the My Company account page.

For more details, refer to Manage your company — Bitdefender Support Center (external link).

  1. In NinjaOne, click Next after selecting the integration option. Paste the copied data into the Company ID field.
  2. Click Next and verify your MFA using your preferred method.
  3. Click Continue. On the next screen, acknowledge the setup terms by selecting the checkbox to proceed. Click Next.
  4. Enter your NinjaOne account email into the provided textbox to verify that the Company ID entered is correct. Click Next.

The system will save your GravityZone Company ID and name to the organization editor (Administration Organization) in the Bitdefender GravityZone tab.

Mappings

When the Bitdefender GravityZone Integration is active, NinjaOne will provision new companies and installation packages in GravityZone that represent your NinjaOne organizations. These companies will have alphanumeric suffixes at the end of their names to denote that they originated from NinjaOne. You can map the companies created in GravityZone to their matching NinjaOne organizations via the Mappings tab on the Bitdefender GravityZone integration configuration page in NinjaOne.

BDGZ_mappings.png
Figure 2: Map NinjaOne organizations to GravityZone companies

NinjaOne will generate new company entities in the following circumstances:

  • When an existing organization has one or more devices with GravityZone deployed at the policy level.
  • When you add a new device with GravityZone turned on in the policy.

For more details, refer to Bitdefender GravityZone and NinjaOne: Managed Device Mapping.

New devices deployed via NinjaOne are automatically located in the NinjaOne-created GravityZone company.

If you move a device from one organization to another, you must manually update this data in the GravityZone console. Moving a device from one company to another may create a duplicate, deactivated device in the source company. You can delete the device by dragging it to the Deleted folder in the GravityZone UI. Doing so does not create an extra license charge.

Devices (or organizations that contain devices) that you delete in NinjaOne, whether managed or not, remain in GravityZone. If you delete a policy in NinjaOne, no changes occur in GravityZone.

Access the GravityZone Console

To access the GravityZone console from NinjaOne, perform the following steps:

  1. Once you have enabled GravityZone on your account, click Console to navigate to the GravityZone console.
BDGZ_access console.png
Figure 3: Access GravityZone from NinjaOne
  1. Click Continue to proceed to the GravityZone console.
Accessing the GravityZone console through NinjaOne will generate a unique email ending in "gz.rmmservice." Do not change this email. It creates the link between the NinjaOne dashboard and the GravityZone console.
  1. Fill out the applicable fields to register your account. When prompted to install GravityZone, you can optionally click Install on this computer now; however, this step is not required to access GravityZone.

Deploy the GravityZone Policy to Machines

To deploy the antivirus software to your devices, perform the following steps:

  1. In NinjaOne, navigate to a Windows or macOS policy from the Administration Policies menu and open the Antivirus section.
  2. From the Antivirus integration drop-down menu, choose Bitdefender GravityZone.
  3. A confirmation prompt displays in a pop-up window. Click Confirm to continue.
BDGZ_policy antivirus.png
Figure 4: Set the antivirus at the policy level

If you are switching from the Bitdefender SDK integration to the GravityZone integration, this action should also trigger the SDK to uninstall from machines. During the transition, your devices will be temporarily unprotected.

If you switch from GravityZone to any other antivirus, you must first select the Disabled option, which resets the Antivirus integration drop-down menu. Once deactivated, other antivirus options will become available.

Switching from GravityZone to Webroot or SentinelOne must follow a specific process, as they are incompatible. You must first uninstall and decommission the GravityZone agents (which means that GravityZone will not be provisioned on new devices) before implementing a different antivirus. Otherwise, you will be charged for both antivirus products.

  1. Configure the preferred installation and post-install reboot options. Choose what to do if another antivirus software is installed. You can proceed with installation or take no action.
  2. Choose whether to reinstall Bitdefender if the initial installation fails. You can attempt to schedule the installation at a specific time each day or at an interval for up to 12 hours.
BDGZ_policy_install.png
Figure 5: Configure installation for Bitdefender GravityZone (click to enlarge)
  1. Set post-installation reboot options. The first option determines how to handle the reboot if an end user is logged in. The Period configuration setting occurs from the time the user logs into the device. The second option sets post-installation reboot options for devices when the users are not currently logged in. Refer to the table following Figure 6 for a description of each action.
BDGZ_policy_install reboot.png
Figure 6: Configure reboot options for Bitdefender GravityZone (click to enlarge)
ActionDescription
Prompt to reboot until reboot is accepted.The device's owner receives a prompt that they must accept before a reboot occurs. If the end user does not accept, the reboot does not trigger. 
You can set the notification Period to prompt the user every minute, hour, or day.
Notify user then rebootThe device's owner receives a prompt that the device will reboot at a set time, which you must configure in the Period field.
Automatically rebootThe device's owner will not receive a notification that the device will reboot. The reboot occurs at the time you configure in the Period field.
Do nothingThe device will not reboot.
  1. Once GravityZone has been deployed, you will notice the GravityZone app at the device level in the Settings → Apps tab (this may take a few minutes to display). You should also find all GravityZone-related activities displayed in the Activity logs on the dashboard.
  2. Review the application details. If the Managed field has a value of No, then follow the instructions on the screen in NinjaOne. You can find additional instructions in our document, Bitdefender GravityZone and NinjaOne: Managed Device Mapping. Otherwise, refer to Bitdefender GravityZone and NinjaOne: Enable and Install Modules to learn more about enabling and installing additional GravityZone modules.
device settings_bdgz app_managed.png
Figure 7: Managed device details

How to Find All Devices with GravityZone Installed

You can use the Devices search page in NinjaOne to determine which managed devices have GravityZone installed as an antivirus. To do so, perform the following steps:

  1. Click Devices in the left navigation pane.
  2. Select Load group.
devices_load group.png
Figure 8: Load a search group in NinjaOne
  1. Use the search field to find and select Has Bitdefender (SDK/GravityZone) on.

Bitdefender GravityZone for Linux

Currently, the Bitdefender GravityZone Integration in NinjaOne does not support Linux. This section provides some resources to help you perform manual installations directly on your Linux endpoints.

To manage and monitor antivirus components on Linux endpoints, use the GravityZone (GZ) console.

Additional Resources

The following learning content will help you take full advantage of the Bitdefender GravityZone feature set.

FAQ

Next Steps