We found avast! Business Protection clients are ignoring URL site blockings when deployed by the SBC. Here's how I solved this issue!
Thanks to this post by Yanto.Chiang:
http://forum.avast.com/index.php?topic=82234.msg671729#msg671729"Dear All, Ok, finally we successfully found how to set URL blocking with SBC.
1. SBC >> Network >> Group View >> Choose the group that administrator would like to set a different policies (click Edit Group Settings)
2. Go to Expert Settings and clicked >> Then you can choose avastcfg://WebShield//WebScanner/BlockedURLs (define the site that administrator would like to blocked and use semicolon as separator
3. To enabled Site Blocking please go to avastcfg://WebShield//WebScanner/URLBlocking and set the value become "1"
After that you may see your each clients on the group that you changes the policies that Site Blocking configuration has been changed. Site Blocking can run smoothly."
This post from avast! tech support:
You can add a list of URLs you want to block from the Console this way:
- Open the Console -> NETWORK -> Edit Group settings -> Expert Settings -> Click the button "I will take the risk, show expert settings"
-> look for the line "avastcfg://WebShield/WebSacnner/URLBlocking" ->
-> change the value to 1 look for the line "avastcfg://WebShield/WebScanner/BlockedURLs" -> in the Value field, add the list this way:
Url1;Url2;Url3;so on...
Please not that the URL should contain "http://" "
I decipher this to mean:
"
http://www.myspace.com;http://www.facebook.com;http://www.youtube.com"
however, when pushed to the client, does not match the required client settings, which are "*facebook.com*" This DOES not work at all!
So I tried this: "*myspace.com*;*facebook.com*;*youtube.com*" to match what avast! stand alone settings. This works intermittantly, or not at all. Seams to change depending upon number of entries. This has got to be a BUG!
So,
http://www.facebook.com* works in a stand alone avast! So I tried this:
"
http://www.myspace.com*;
http://www.facebook.com*;
http://www.youtube.com*" THIS WORKS!
NOTE: Webshield must be STOPPED and STARTED at client to guaranteed that you are using these new setting!
J.R. Guthrie
Am I missing anything here?