Grisoft AVG and firewalls

[zumbruk]

Anyone running AVG behind a "proper" firewall? The doco describes how to configure built-in ones, but I'm behind an external firewall & before I rummage through the (enormous) logs to find out what's going on, perhaps someone else here has already done it?

(The update function doesn't work - it says it can't talk to Grisoft.)

[toni896]

proxy settings ? authentication needed to get past firewall

[rsvmilly]

Depends what you mean by proper. I run it behind a Netgear DG834G on wired and wireless machines. I also use Zonealarm, which had to be taught to allow AVG.

A quick google turned up this forum. They reckon it is plain port 80 HTTP traffic

http://forum.grisoft.cz/freeforum/read.php?1,56613,b

[zumbruk]

rsvmilly said:

Depends what you mean by proper.

ipfilter on a Solaris box. I said "proper" to distinguish it from the "firewalls" that run on the host they are protecting...

rsvmilly said:

I run it behind a Netgear DG834G on wired and wireless machines. I also use Zonealarm, which had to be taught to allow AVG. A quick google turned up this forum. They reckon it is plain port 80 HTTP traffic http://forum.grisoft.cz/freeforum/read.php?1,56613,b

I assume it doesn't pick up the IE proxy settings, then? I don't allow PCs to talk directly to the Internet and all their web traffic is through a proxy. Looks from that forum (which I couldn't find - thanks for that!) that (i) AVG *doesn't* pick up the IE proxy settings and (ii) you can configure it to use a proxy.

Thanks for the help - once you know something is actually possible, it's much easier to look for how to do it.


>> Edited by zumbruk on Monday 23 January 11:32

[toni896]

No doesn;t pick up on IE setting (shame really)
however you can can set it to use a proxy and if it still cant connect try direct, really handy for laptop users

[greenv8s]

I'm running AVG Free Edition behind three firewalls (belt, braces and a bit of string 'just in case'). I'm running ZA locally, I'm behind a NAT router with an internal firewall and my ISP also provides a firewall that blocks inbound connections to all the Microsoft back doors (sorry, I meant to say standard windows network services). ZA lets me choose whether I want to allow outgoing connections per application. The others just let them through, but keep out the attempts to set up inbound connections. The only setup I had to do for AVG was tell ZA to let it make outgoing connections.

[aldi]

It doesnt pick up proxy settings automatically and doesnt do proxy authentication either, I had to create some exceptions in the proxy ACL and that sorted it.

The other way I think would just be to have one machine updating, and share out the folder it d/l's the .bin updates into and get the clients to update from 'folder' rather than 'internet' - the choice is in the AVG control pannel somewhere I think.