Configuring Avast Business Antivirus Policies: Enabling and Configuring Behavior Shield

Behavior Shield is available for Workstations only, not Servers.

Behavior Shield is an additional layer of active protection in Avast Business Antivirus. It monitors all processes on devices in real-time for suspicious behavior that may indicate the presence of malicious code. Behavior Shield works by detecting and blocking suspicious files based on their similarity to other known threats, even if the files are not yet added to the virus definitions database.

1. Click Service Delivery > Policies > Avast  Antivirus.
2. Click the name of a policy.
3. Click the Workstation Settings tab.
4. Click the Active Protection tab.
5. In the Shields section, move the slider to enable Behavior Shield.
6. Click Apply  Changes.

Configuring Avast Business Antivirus Policies: Defining What Behavior Shield Does with Suspicious Programs

Behavior Shield is available for Workstations only, not Servers.

You can configure how Behavior Shield deals with suspicious files that it encounters. You can also set up file locations that are excluded from Behavior Shield.

1. Click Service Delivery > Policies > Avast Antivirus.
2. Click the name of a policy.
3. Click the Workstation Settings tab.
4. Click the Active Protection tab.
5. Click the Customize link in the Behavior Shield section.
6. In the Main Settings section, click a check box to define how to deal with suspicious programs:
   • Always ask
   • Automatically move detected threats to the Chest
   • Automatically move known threats to the Chest
7. Click Apply Changes.

Configuring Avast Business Antivirus Policies: Excluding Locations from Behavior Shield

Behavior Shield is available for Workstations only, not Servers.

Exclusion paths can include wildcard characters * or ?. The asterisk replaces zero or more characters, whereas the question mark replaces a single character. For example:

• To block all subdomains and domains of a particular website, add *. to the beginning and /* to the end of the website domain, type *.example.com/* into the text box.

• To block any website containing triple "x" anywhere in the URL, type *xxx* into the text box.

• To block all html pages with the filename containing a single character in domain of a particular website, type example.com/?.html into the text box.

1. Click Service Delivery > Policies > Avast Antivirus.
2. Click the name of a policy.
3. Click the Workstation Settings tab.
4. Click the Active Protection tab.
5. Click the Customize link in the Behavior Shield section.
6. Type a file location to exclude and click Add.
7. Repeat steps 6 until all locations are added.
8. Click Apply Changes.

To remove an exclusion from Behavior Shield

1. Click Service Delivery > Policies > Avast Antivirus.
2. Click the name of a policy.
3. Click the Workstation Settings tab.
4. Click the Active Protection tab.
5. Click the Customize link in the Behavior Shield section.
6. Next to the exclusion you want to remove, click .
7. Click Apply Changes.