Firewall Requirements

 

For overall functionality, and to enable the Antivirus client and/or the management console to authenticate/update, you must allow certain ports and URL addresses through the firewall or proxy server on your endpoints.

Ports

• UDP 53 DoH enabled – Secure DNS services (if using Real Site)
• TCP 80 – Internet vulnerability checks and feature updates
• TCP/UDP 443 – Encrypted communication
• TCP 4158 – Mirror, for local updates within local network
• TCP 7074 – Remote Deployment within local network
• TCP 7500 - For push notification services

URLs

• *.avast.com
• *.avcdn.net
• islonline.net (if using Remote Control)
• *.managedoffsitebackup.net (if using Cloud Backup)
• *.sosonlinebackup.com (if using Cloud Backup)
• URLs required by application vendors (if using Patch Management - it downloads the necessary patches directly from the vendors; therefore, the connections must be allowed for the service to operate correctly)

Geoblocking

Avast web services are hosted in many countries around the world. Therefore, we do not recommend geoblocking in your firewall settings. If geoblocking is necessary, we recommend setting URL Allow rules to supersede geoblocking, so Avast traffic can still be allowed.