Avast Free Firewall allow internet access on Windows startup?

[ccm582]

On Windows computer startup/reboot or even Sign-In, does Avast Firewall allow blocked programs internet access before Avast program is fully started? If so, what can we do?

[DavidR]

By its nature Avast would be very early in the Windows Startup.

It would certainly be before your browser (and these programs that you mention) that would be trying to connect to the internet.

If you have blocked programs, I can't understand why you would still have them installed if you didn't want them to have internet access (example might help)  ?

[ccm582]

I noticed that on PC startup, Avast main program takes time to fully load. So if Avast starts early, is it because of Avast Services like 'Avast Firewall Service' which are in Windows-Services which start before programs?

I'm using an ASUS laptop with preinstalled ASUS software which I want to access the internet. However,  in Windows Firewall, these software have Admin rights which allow on their own to add their own inbound firewall rules. But these software can't add their own rules to Avast Firewall if I set to Ask mode. However, if Avast Firewall start late, then Windows Firewall will take effect before Avast Firewall and these rules will access the internet. That is why I asked whether Avast Firewall starts early or not.

[DavidR]

If by main program you are talking about the AvastUI  (?), that has nothing to do with detections.  There are low level drivers to handle that.

If you have the Avast Firewall component installed, I would have expected the Windows Firewall to have been disabled in the same way as Windows Defender is when you install Avast Antivirus.

Note I don't have the Avast Firewall component enabled.

[ccm582]

Yes, I'm talking about Avast UI. Good to know that Avast detection works before the main UI loads on startup.

If Avast Firewall is not installed, or disabled, then Windows Firewall take over. You can check this in Windows Setting for 'Firewall & network protection'.

Thanks for your answers. They were very helpful.

[DavidR]

You're welcome.

If Avast Firewall is not installed, or disabled, then Windows Firewall take over.

That is exactly what I was talking about, the Windows Firewall shouldn't be running if the Avast Firewall is running, so it shouldn't matter what the settings are in that unless you disable the Avast Firewall.

[ccm582]

After testing, I found that on PC startup/reboot, Windows Firewall will be active for several seconds while the programs are loading before Avast Firewall takes over.  In those seconds, some programs like MS Edge and even Avast, with administrative privileges, add their own inbound firewall rules to Windows Firewall.

So I use Malwarebytes Windows Firewall Control's High Filtering Profile to block all incoming and outgoing internet connections. This will make sure that Windows Firewall doesn't have access to internet at all. Then internet is restored when Avast Firewall takes over.

[DavidR]

Surely Windows should disable the Windows Defender Firewall, when any other 3rd party firewall is installed, as it does with the Antivirus when 3rd party Antivirus is installed.

I guess there is confusion in that the Avast Firewall is integrated within the main product -    
Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier), etc.

If not, then this should/would impact other All in one AV solutions.

[bob3160]

@ccm582,
David is correct. I just installed the Avast firewall module to prove that point.

Prior to that installation, the active firewall was the one that came with Windows 11,
That protection is now turned off as the Avast Firewall is the active Firewall.
Hope that ends the apparent misunderstanding.

[ccm582]

You missed the point. For a few seconds, after Signin, when the programs are loading, your Screen will show Windows Firewall is active. Then seconds later, Avast Firewall kicks in.

Try checking your Firewall Status immediately after Windows Signin.

[bob3160]

You missed the point. For a few seconds, after Signin, when the programs are loading, your Screen will show Windows Firewall is active. Then seconds later, Avast Firewall kicks in.

Try checking your Firewall Status immediately after Windows Signin.

As you can see from my screenshot, the active firewall is Avast, Windows Firewall is turned off and not active.
I actually don't care which firewall is active as long as one of them has my back.

[DavidR]

You missed the point. For a few seconds, after Signin, when the programs are loading, your Screen will show Windows Firewall is active. Then seconds later, Avast Firewall kicks in.

Try checking your Firewall Status immediately after Windows Signin.

As you can see from my screenshot, the active firewall is Avast, Windows Firewall is turned off and not active.

I actually don't care which firewall is active as long as one of them has my back.

I think he is saying there appears to be a flip flopping between the Windows Firewall and the Avast Firewall (e.g. Windows Firewall getting in first) at startup.

However to my mind if the Windows Firewall has been disabled it should stay that way (as I mentioned in Reply #5) and no flip flop between it and Avast at startup.

[ccm582]

There is no flip flop. When we sign-in to our Windows user account, Windows Firewall takes effect for a few seconds until Avast Firewall is fully loaded. Then it will not revert back to Windows FW until next reboot of PC or next sign-in.

[bob3160]

There is no flip flop. When we sign-in to our Windows user account, Windows Firewall takes effect for a few seconds until Avast Firewall is fully loaded. Then it will not revert back to Windows FW until next reboot of PC or next sign-in.

Have it your way.