AVG Internet Security Business protects company workstations through several resident shields and a network firewall. It can run as a locally managed endpoint product or receive rules through the business management console. The distinction matters: the endpoint performs the scanning, while a central policy decides which components run, how updates arrive, what traffic the firewall permits, and whether the employee can change those settings.
Separate shield jobs
File Shield watches files when programs open, run, modify, or save them. Web Shield inspects data transferred during browsing. Mail Shield examines incoming and outgoing email traffic, while Behavior Shield watches active processes for suspicious actions. A detection in one layer does not mean every layer found the same item; each shield sees a different route into the computer.
Remote Access Shield watches connection attempts that use remote-access services. The firewall handles a broader question by monitoring traffic between the device and other networks. These controls complement the malware engine, but they also create different places to investigate when a legitimate program cannot connect.
Rules across devices
The AVG Internet Security Business management console groups settings into policies. One policy can apply antivirus choices, firewall behavior, exclusions, proxy details, update schedules, and restart rules to many assigned devices. A change then travels to every device or group linked to that policy. This is more consistent than changing machines one at a time, but a broad mistake also travels farther.
Not every setting applies to every operating system. The console identifies platform coverage beside individual controls, so a policy shared by workstations and servers can produce different results. Managed firewall settings may also prevent an endpoint user from changing a network’s trust level. When a local option looks locked, the governing policy needs inspection before reinstalling the client.
Firewall decisions
AVG Internet Security Business application rules decide whether a process may make incoming or outgoing connections. AVG Internet Security Business can choose automatically, block every connection, allow every connection, or ask the user when a new program first connects. Administrators can replace local rules with console rules so employees cannot weaken them.
A strict rule can stop a legitimate updater, database client, or line-of-business program. The firewall log records blocked packets and helps identify the protocol, direction, and destination involved. Changing a rule without reading that evidence can expose more traffic than the program needs. Internet Connection Sharing is another deliberate exception because enabling it opens extra ports.
Use narrow exclusions
An AVG Internet Security Business exclusion can remove a path, folder, or website from all scanning or only selected shields. It may resolve a false detection or reduce repeated scanning of a trusted data set. It also creates an area that receives less inspection, so AVG recommends keeping exclusions as small as possible.
The combined exclusion text has an approximate character limit. Wildcards do not behave identically in Behavior Shield and Hardened Mode. A broad pattern can therefore fail to solve the intended case or exclude more material than expected. Record the business reason and affected component before adding it.
Plan the restart
Program and definition updates can run automatically or wait for an administrator. Some updates need Windows to restart. Policies can schedule that restart, trigger it after logout, start it after a warning, or leave it manual. A pending restart can interfere with later updates and patches, so selecting ‘do not restart’ does not remove the maintenance requirement.
Devices must be online and communicating with the console to receive work. A missed ordinary task can run when a device returns, while missed restart or shutdown tasks are not replayed in the same way. Laptop fleets therefore need a schedule that accounts for machines that spend long periods away from the company network.
