Logging Blocked Packets to Create Exclusions (AVG Business Antivirus)

 

If you are having difficulties with your AVG Business Firewall, you can enable logging of blocked packets to get a better sense of what the Firewall is blocking down to the packet level, which can help create packet rules/exceptions.

If you are using AVG Business Cloud Console or the On-Premise Console to manage your devices, note that you can enable this functionality only from the end device, as shown below.

Enabling Blocked Packets Logs

To enable the logging of blocked packets from the client UI:

1. Go to Menu, then select Settings
2. Click Search in the top right corner

3. Type geek:area and hit ENTER

4. Scroll to the Enhanced Firewall section
5. Tick the Log all blocked packets checkbox, then click Go Back

Once this feature has been enabled, induce the issue on the device to generate firewall logs.

Viewing Firewall Logs

To access the generated firewall logs from the client UI:

1. Open the Antivirus client
2. Select the Web & Email tile
3. Click OPEN above Enhanced Firewall

4. In the Enhanced Firewall screen, select the Logs tab

By default, the list shows apps blocked in the past month. You can use the drop-down arrow next to the filter to change the filtering options.

Other than by blocked apps, you can filter your firewall logs by blocked devices or applied rules. Also, you can alter the time range to show the results from the past minute, hour, day, month, or year.