ATP500 - Avast antivirus block, anti-botnet log

macweb

Hi there,

ZyWall blockiert Avast.txt

we have the problem that since the last firmware update in November our ATP500 blocks the Avast antivirus and the message “BLOCK anti-botnet” appears in the log. We have configured under: Security Service > Reputation Filter > Types of Cyber Threats Coming From The Internet And Local Networks, deactivated the “Botnets”, but Avast is still blocked. The error even occurs when you go to: Security Service > IP Exception and whitelist the IP of Avast. Attached is a screenshot of the log where the error message can be seen. How can we fix this error?

Thanks for your help.

Zyxel_Melen

Update:

This issue is that Avast downloads software via the website "mac-av.u.avcdn.net." The specific download link is recorded as a Malicious site and has been blocked by the URL threat filter, which is called Anti-Botnet in before firmware.

If you allow Avast to download additional software, you can add "mac-av.u.avcdn.net" to the URL threat filter white list.

Zyxel_Melen

Hi @macweb,

Could you help collect the diagnostic file so we can check this issue?

Please reference the screenshot below to collect and send it to me via private message(you'll need to zip it since Zyxel community can't upload .bz2 file):

Collect diagnostic process:
Navigate to Menu > MAINTENANCE > Diagnostics > Diagnostics > Controller page to click the Collect Now button.

Download the diagnostic file:
Navigate to Menu > MAINTENANCE > Diagnostics > Diagnostics > Controller page. Select the diagnostic file and then click the download button.

Zyxel_Melen

Update:

This issue is that Avast downloads software via the website "mac-av.u.avcdn.net." The specific download link is recorded as a Malicious site and has been blocked by the URL threat filter, which is called Anti-Botnet in before firmware.

If you allow Avast to download additional software, you can add "mac-av.u.avcdn.net" to the URL threat filter white list.