AVG Firewall Profiles, Area Detection and Automatic Profile Switch

The Profiles, Area Detection and Automatic Profile Switch are closely related features of AVG Firewall. This FAQ topic describes what they are and how they work, allowing you to configure AVG Firewall exactly according to your needs.

1. What is the Profile?

Profile in AVG Firewall is a complete set of Firewall configuration. AVG Firewall has a default set of profiles that contains specific settings for these areas:
  •     adapters
  •     networks
  •     safe networks/adapters
  •     application rules
  •     system rules
  •     services
  •     logging options
The result of this is the possibility to set up multiple AVG Firewall configurations and use them in the networks you connect to, based on your security requirements.

2. What is Area Detection?

Area Detection is the ability of AVG Firewall to distinguish which network is the computer currently connected to. The detection is independent of the used adapter, network configuration and network type. If you connect a laptop with AVG Firewall installed to one Wi-Fi network, you will receive an Area Detection dialogue where you can assign the profile you want to use. When connecting to another Wi-Fi network, the Area Detection dialogue will be displayed again, even if the network configuration is exactly the same and the only difference is in the Wi-Fi router/hotspot.

This function allows you to create a custom configuration for each single network you connect to.

3. What is the Automatic Profile Switch?

By combining the Profiles with the Area Detection, it is possible to automatically assign any profile to any network. Each profile contains its own configuration, each network is recognized as a new area.

Example:

When you connect your computer to a company network, the Area Detection dialogue is displayed. You decide to use the profile "Computer within domain," because the network is protected by gateway and other internal security measures. Then you decide to connect to the company network using Wi-Fi. Again, Area Detection is displayed and "Computer within domain" is the best choice.

Then, you take your laptop and go to a café with a public Wi-Fi hotspot. A new area is detected again, and you select profile "Directly connected to the Internet" to block all unwanted traffic (e.g. file sharing). This area is recognized, even though you are using the same Wi-Fi adapter, and the network configuration (IP, Gateway, etc.) is identical to that at work.

Finally, you connect at home using cable. Once again is the area detected, and you select profile "Small home or office network".

Once you connect to these networks for the second time, the desired profile will be selected automatically based on your previous choice.

Each of the profiles used in this example has different settings for applications (e.g. Skype, FTP Server, ICQ, Internet browser), system rules (file sharing, RDP, RPC, etc.) and all other options, so for each network you connect to, the required security level is always maintained.