Bitdefender GravityZone
By integrating Bitdefender GravityZone with ThreatDefence via Bitdefender’s APIs, you can ingest real-time threat alerts and security events into ThreatDefence, enabling centralised monitoring and faster incident response.
This integration allows ThreatDefence to query endpoint protection data, manage incidents, and initiate remediation actions, such as isolating endpoints or triggering scans - enhancing endpoint visibility and threat mitigation across your environment.
Prerequisites
GravityZone Control Center access (Company Administrator role)
A reachable HTTP/HTTPS endpoint with Basic Authentication credentials
Firewall rules permitting outbound traffic from GravityZone to your endpoint on the required port
Steps
1. Lodge a ticket with ThreatDefence Support.
A ticket is required to onboard this datasource, as TD support needs to deploy a collector to your NDR or Syslog forwarder. If you do not have one of these deployed, one will be required.
2. Open Integration Settings
Log in to GravityZone Control Center
Navigate to Configuration → Integrations
Select the Push tab (or SIEM Integration, depending on your version)
3. Add a New Push Service
Click Add
Set Service Type to HTTP/HTTPS
4. Configure the Endpoint
URL
https://{your-ip-address}
Port
To be provided by ThreatDefence Support
Authentication
Basic Authentication
Username
To be provided by ThreatDefence Support
Password
To be provided by ThreatDefence Support
Note: ThreatDefence Support will provide you the destination port, username and password.
5. Select Event Types
Enable the event categories relevant to your use case:
Malware – detections, blocked threats, quarantine actions
Network Attacks – IDS/IPS alerts, blocked connections
Audit – admin logins, policy changes
Device Control – USB/peripheral events
Endpoint – agent status, scan results
6. Save and Test
Click Save
Use the Test button to send a sample event to your endpoint
Confirm your endpoint returns HTTP 200 OK
Troubleshooting
Events not arriving
Check firewall rules between GravityZone and your endpoint
401 Unauthorized
Verify username/password and Basic Auth encoding
No events for a category
Re-check selected event types in push configuration
Last updated