Firewall Requirements

This Article Applies to:

Avast Business CloudCare

For overall functionality, and to enable the Antivirus client to authenticate/update, you must allow certain ports and URL addresses through the firewall or proxy server on your endpoints.

Ports

TCP 80 - Internet vulnerability checks and feature updates
TCP 443 - Basic communication between the portal and the installed clients
UDP 123 - Accessing public time servers to prevent tampering with the Content Filtering Schedule settings
TCP/UDP 135 - Remote Deployment
TCP/UDP 5222 - XMPP communication

URLs

*.avast.com
*.avg.com
*.avcdn.net
*.m.in-app.io
islonline.net (if using Premium Remote Control)
*.sosonlinebackup.com (if using Cloud Backup)
*.managedoffsitebackup.net (if using Cloud Backup)
URLs required by application vendors (if using Patch Management - it downloads the necessary patches directly from the vendors; therefore, the connections must be allowed for the service to operate correctly)

Geoblocking

Avast web services are hosted in many countries around the world. Therefore, we do not recommend geoblocking in your firewall settings. If geoblocking is necessary, we recommend setting URL Allow rules to supersede geoblocking, so Avast traffic can still be allowed.