AVG Firewall Safe Networks

In AVG Firewall, it is possible to set some networks (IP ranges) as Safe. At the same time, rules for applications or system services can be allowed only for Safe networks. The combination of the two allows you to configure your Firewall to protect your computer from unwanted network connections, while allowing all required communication from and to known sources.

Note:
The configuration of Safe networks can be combined with Automatic Profile Switch functionality.

Safe networks
configurable in the AVG program - menu Tools - Firewall settings - Profiles - your profile - Defined networks


To be able to set some network as Safe, it is necessary to create it first using the button "Add network". Once you create the network (in other words custom list of IP addresses), you can specify that this network will be safe. "Allow for all" rules are applied to all networks including the safe ones, and "Allow for safe" is applied only to the safe network. For example:

  •     create a new network (e.g. 192.168.0.1 - 192.168.0.100) and mark it as Safe
  •     set Microsoft File Sharing and Printing as Allow for safe
  •     if the other computer is in the IP range specified when creating the network, it will be able to   connect and browse your shared files
  •     connections from different IP addresses will be blocked

This way, you can allow sharing of your files or network resources (or allow any other communication) only to strictly specified list of IP addresses/computers.

"Allow for safe" rules are stored individually for each profile. This allows you to create fully customized sets of configuration for any network you are connecting to.

If you have the profile "Small home or office network" in your AVG, some rules which are typically required in this scenario (MS File Sharing and Printing, Replies to ICMP diagnostics) are already marked as Allow for safe. It is therefore only necessary to set some adapter or network as safe to gain full advantage of this profile.

There is also an option to use IP addresses whitelist/blacklist. When some IP address is entered into these two dialogs, all outgoing and incoming communication will be allowed (whitelist) or blocked (blacklist). IP addresses whitelist/blacklist can be found in the Firewall settings -> <used profile> -> Defined networks.