Web Shield

 

Web Shield protects your system from threats when you are browsing the web by actively scanning data that is transferred to prevent malware from being downloaded and run on your PC. Any malicious connections/downloads will be blocked by Web Shield automatically.

In Web Shield, you can enable and configure web, HTTPS, and script scanning.

We do not recommend you install this component on a server OS that is also running Microsoft Exchange. The Exchange and Anti-Spam components handle Exchange-level filtering and will conflict with this component.

Configuring Web Shield Settings

To access Web Shield settings:

1. Open the Policies page
2. Click the desired policy to open its Detail drawer
3. Select the Settings tab, then Antivirus
4. Expand the Web Shield section (under Antivirus Protection)

Seven sets of settings are available here:

• Main settings
• Web scanning
• Actions
• Packers
• Sensitivity
• Site Blocking
• Report file

Main Settings Tab

The main Web Shield settings offer the following options:

• Enable Web scanning: Enables Web Shield to scan all files downloaded from the internet for malware. When this is enabled, you can also choose whether to receive warnings when downloading files with poor reputation and/or to scan traffic from well-known browser processes only.
• Enable HTTPS scanning Enables Web Shield to scan websites with encrypted connections. If disabled, only websites with unsecured connections are scanned.
• Use intelligent stream scanning: Lets Web Shield perform scans in operating memory only (without caching).
• Do not scan trusted sites: Leaves out trusted sites from the scan.
• Block malware URLs: Prevents malicious sites from opening.
• Script scanning: Allows Web Shield to block malicious scripts being run in browsers and other applications. This includes remote threats from the web and outside sources, and local threats saved to disk or in the browser cache. Script scanning can also detect and block malicious scripts that come from HTTPS (encrypted) connections.
• Enable QUIC/HTTP3: Scans communications sent and received via Google's QUIC protocol.
• Block botnet attacks: Prevents botnets from using the device to attack other computers.

Web Scanning Tab

Here, you can configure which items should be scanned when they are downloaded from the web:

Scan all files: Scans all downloaded files, which may slow down the scan and web browsing considerably. If you select this option, consider excluding trusted websites and/or MIME types from the scan for better performance.

Scan selected file types only: Scans only files with extensions and/or MIME types that you specify here.

You can also prevent Web Shield from unpacking archives with valid digital signatures.

Actions Tab

The Actions tab defines how viruses, PUPs, unwanted tools, and suspicious objects are handled when detected by File Shield. For each type, it is possible to only configure one single action. The available actions can be selected from each drop-down menu:

• Abort connection (selected by default): Terminates the connection with the applicable website as soon as a potential threat is detected.
• Ask: Gives the option to terminate the connection with the applicable website or remain connected when a potential threat is detected. Remaining connected may be risky.

Under the Options section, you can also choose whether AVG will display a notification each time Web Shield detects a threat.

Packers Tab

These settings allow you to choose which archive (packer) files AVG should try to unpack during the scanning process (unpacked files can be better analyzed for malware). Original archives remain intact while processed by Web Shield.

Sensitivity Tab

Here, you can adjust the sensitivity of the Antivirus scan for Web Shield:

• Heuristics Sensitivity: Heuristics enable Antivirus to detect unknown malware by analyzing code for commands that may indicate malicious intent. The default setting is Normal. With higher sensitivity, Antivirus is more likely to detect malware, but also more likely to make false-positive detections that incorrectly identify files as malware. Code emulations unpack and test suspected malware in an emulated environment where the file cannot cause damage to devices. Use code emulation is enabled by default.
• Sensitivity: Enable Test whole files to check the whole content of a file instead of the parts typically affected by malicious code. There is usually no need to enable this option, and it will likely impact system performance.
• PUP and suspicious files: Choose whether or not to scan for Potentially Unwanted Programs (PUPs). You can select the option separately for pre and post 21.5 and 21.6 versions of the Antivirus respectively. For versions 21.6 and newer, you can also choose whether to scan for potentially unwanted tools.

Site Blocking Tab

Here, you can specify any URL addresses that you want Web Shield to block.

Report File Tab

You can configure the report file here in order to enhance the reporting of the shield:

• File name: Enter a name for the report file (default * will use the default file name)
• File type: Select the format of the report file (plain text (ANSI), plain text (Unicode), or XML)
• If file exists: Select Append if you want new results to be added to the end of the previous report, or Overwrite if you want new results to replace the previous report
  • Using the Append option will gradually increase the size of the report file on the disk. Including informative events such as OK will also greatly increase the size on the disk as every clean file will be reported.
• Reported items: Define which events appear in report files:
  • Infected items — Files and areas of the scanned environment that the virus scan identifies as containing malware
  • Hard Errors — Unexpected errors that require further investigation
  • Soft Errors — Minor errors, such as a file being unable to be scanned because it was in use
  • OK items — Files and areas that the virus scan identified as being clean
  • Skipped items — Files and areas that the virus scan did not check because of the scan settings

Adding Web Shield Exclusions

If needed, you can add exclusions to the Web Shield scans through the Antivirus Exclusions settings of a selected policy. This can speed up the scans and prevent false-positive detections.

For more information on standard and component-specific exclusions, see Configuring Antivirus Exclusions.

FAQ