80 & 443 are already opened to the net, or Bitdefender would not work now!
HTTP and HTTPS port 80 updates to Gravity
HTTP and HTTPS port 443 updates & communication to GravityZone
Port 7074, 7076, and 8443 is internal inbound and outbound to relay server
Relay setup as communications and update server
Rule for relay only, allow 8443 (communications to GZ cloud service communication server)
7076 (cloud detection service – Nimbus – for ATC)