Hi Infratech, thanks for the suggestions, but I'm not using Avast Business security, and not the Avast Business Hub.
My problem is not configuring the rules, I already do that, but to know:
1) if the firewall rules are applied before the users login (and from my experiments the answer is no!) and
2) if so, does this mean applications are free to do whatever they want if I don't login (because essentially the Avast Firewall is not started yet)?