Enable or Disable Bitdefender Add-Ons

Atera partners with Bitdefender for advanced cybersecurity, to prevent, detect and respond to all threats to your customers' devices. Once you've activated Bitdefender, you can enable or disable the optional Bitdefender add-ons for new or existing agents. 

This article describes enabling/disabling of the following paid add-ons:

• Security for Exchange (Exchange Protection)
• Full Disk Encryption (Encryption) 
• Endpoint Detection and Response (EDR Sensor) 
• Advanced Threat Security (Hyper Detect and Sandbox Analyzer) 
• Email Security

Note:

Bitdefender Cloud Security includes the following core features:

- Antimalware
- Advanced Threat Control
- Advanced Anti Exploit
- Risk Management
- Firewall
- Network Protection
- Device Control
- Web Filtering
- Ransomware Mitigation 

Optional add-ons

- Encryption (Disk Encryption)
- EDR Sensor (Endpoint Detection and Response)
- Exchange Protection (Exchange Security)
- Email Security
- Advanced Threat Security.

These come at an additional cost. Learn more

Prerequisite: Please ensure you have the optional add-on features checked/unchecked for each Customer in the Bitdefender GravityZone console.

1. Click on the Companies tab, then click on the desired customer.

2. On the Edit Customer page, click on Licensing

3. On the Licensing tab, click on Edit licensing options

4. Scroll down to the Add-ons section, and enable the desired add-ons.

Important Note:

Endpoint Detection and Response (EDR) requires HyperDetect and Sandbox Analyzer (Advanced Threat Security). When EDR is enabled, Advanced Threat Security will be greyed out and selected by default. 

To enable or disable Exchange Protection, Encryption, and EDR Sensor (the first 3 add-ons on the list)

New installation 

If it is a fresh agent installation, the add-ons can be enabled or disabled when creating the installation package. 

1. Log in to the Bitdefender GravityZone console.

2. Go to Network > Packages > Add

3. On the New Endpoint Package page, enter a name for the package, select the relevant modules and click Save.

4. Download the full package as per computer requirements.

Or you can send a download link to the user by clicking on Send download links. Enter the email address of the user you need to send the download link to and click on Send. 

NOTE: Use ; (semicolon) on your keyboard to close the email link.

You can also use the Bitdefender installation method through Atera, check our article for more details: Install Bitdefender via Atera

The agent is already installed

If the agent is already installed with the base product and you need to enable/disable the add-on features, please follow the below steps:

1. Log in to the Bitdefender GravityZone console.

2. Go to the Network tab:

3. Under the relevant Company, expand to select Computers and Groups. Then select (an) installed agent(s) > Tasks:

Or right-click agent > Tasks.

4. Select Reconfigure Client.

5. Select one of the following actions:

• Add - Add new modules besides the existing ones.
• Remove - Remove specific modules from the existing ones.
• Match list - Match the modules installed with your selection.

6. Select the modules (add-ons) and roles that you intend to install or remove on the target endpoints.

7. Under the Scheduler section, choose when the task will run:

• Now, to launch the task immediately.
• Scheduled, to set up the task recurrence interval. In this case, select the time interval (hourly, daily or weekly) and configure it according to your needs.

8. Click Save. A confirmation message will appear.

You can view and manage the task on the Network > Tasks page.

Note: To make use of the EDR add-on, alongside enabling it within the Company and installation package, it also needs to be enabled in the Policy (Policies > select the relevant policy > enable Incidents Sensor).

To enable or disable Advanced Threat Security (Hyper Detect and Sandbox Analyzer)

ATS is disabled by default in the Default policy — this can be found under the Policies tab > Default policy (default).

The Default policy is read-only, therefore, in order to edit it, you will need to either create a new policy or create a clone of the existing one. This is done by clicking on Clone Policy within the top-right corner pop-up: 

Keep in mind that Advanced Threat Security includes Hyper Detect and Sandbox Analyzer; once you have the new policy created, these two modules require enabling or disabling.

Once you make the required changes, click on Save. 

Note: For Sandbox Analyzer to be turned on/off, ensure that the "Automatic sample submission from managed endpoints" is checked/unchecked:

Next, to assign the new policy to a Company or the entire account, go to the Network tab > right-click on the relevant company > Assign Policy

Email Security

Email Security is managed through the designated console, under the Email Security tab.

Note: To check which add-ons are enabled on which endpoints, you can generate the Endpoint Modules Status report.

1. Go to the Reports tab > Add: 

2. Select Endpoint Modules Status > Generate:

This gives you an updated report of what add-ons are currently enabled on your endpoints. 

Important Note: For further information on troubleshooting the Bitdefender platform, please contact Bitdefender support