AVG blocks VPN

Notay · 10-08-2008, 04:09 AM

Hi (i hope this is the correct place to post this)

i have created a vpn and avg will not allow it to access. I have allowed the GRE and ESP Protocols as avg website has said (http://www.avg.co.uk/faq.num-817?srch=using-vpn#faq_817) but this has not done anything in terms of allowing a connection.

I have also allowed it in the 'defined adapters' tab in the firewall settings. I have contacted avg and they have failed to help me. can anyone please provide me with some help?

thanks

Notay

**johnwill** · 10-08-2008, 07:54 AM

Change from AVG to a product that works.

Notay · 10-09-2008, 07:12 AM

that would be easy but cannot afford to do so at the moment, any real help available?

**JamesO** · 10-09-2008, 09:11 AM

What makes you think AVG is the problem?

Unless you have AVG with the firewall, I doubt AVG is blocking your VPN.

Firewalls and anti-virus software should be configurable if there is anything that could or would impact the VPN.

I would not get rid of AVG as I really do not think it is the problem. Either you have a different problem or AVG is not configured correctly.

More information on what you have tired to do to troubleshoot and resolve the problem would be helpful. Need answers to some of the following:
What OS?
What are you using for a firewall?
What router are you using?
What ISP are you using?

Also describe your VPN situation, software, hardware, what you are connecting to and do you know if you may possibly have private IP address conflicts?

JamesO

Notay · 10-09-2008, 11:23 AM

avg seems to be the likely problem since when i disable avg firewall, i am able to connect. i am using xp pro, avg internet security, netgeart router, sky isp. I connect to a private university vpn.

i have tried to configure avg to allow it but to be honest i do not know much about protocols so am having a little difficulty thats why i asked on this board. i have also done exaclty what avg have said in the above link in the first post, read it.

**JamesO** · 10-09-2008, 12:16 PM

Ok, now we are getting somewhere. AVG Internet Security has the firewall as well. As I mentioned a firewall is the most likely problem.

The issue is the firewall is not properly configured, it is actually doing its job!

You need to turn the AVG firewall off, connect to the VPN, then do an IPCONFIG and find out what the VPN IP address range is. Then add the VPN IP address range into the firewall rules. This is the first thing I would try. Usually when you connect to a VPN, you get a new IP address assignment. Have had similar issues with Zone Alarm in the past as well.

I do not have AVG Internet Security on any of my machines, but I might be able to access a machine with it if necessary.

JamesO

Notay · 10-11-2008, 01:28 PM

hi

i did the ipconfig and added the ip address in the firewall settings - i clicked to add a new safe ip and entered the ip address of the vpn connection. However this still did not allow the vpn to be connected once i enabled the firewall on. I do not understand where i am going wrong or what i could be missing out

**JamesO** · 10-11-2008, 03:57 PM

Make sure you include the VPN gateway address. Not your IP address will change once you access the VPN. Also if you are trying to VPN and use remote desktop, you probably need to also add the remote desktop address as well.

Check the AVG log to see if there is anything in the log that will clue you info what is going on. Look for blocked traffic in the Filter Device log.

Again, it is most likely not a problem with AVG, it is just not configured correctly.

JamesO

Phil_Perry · 11-27-2008, 03:22 AM

I have been playing with AVG Internet security and had the same problem with a VPN connection. After looking at the Logs I realised that I needed to allow the UDP protocol. Under Defined services I created a new service for UDP. You can select the protocol and the ports and the direction. I set port 0 for local and remote and the direction as both ways. Then I created a System service to use this newly created Defined service. I also set the VPN connection under Defined adaptors to be safe. This was in addition to setting the System services ESP, GRE, L2TP and PPTP to safe.

Phil_Perry · 11-29-2008, 12:32 PM

An update to my last message. I suggested that a UDP defined service was required. After experiencing other problems with the connection not staying up I went back to the drawing board. I now have only one profile in addition to the Allow all and Block all which you get anyway. My profile is Small home or office network. I have assigned this profile to all adaptors (which includes my VPN connection) and areas. Under this profile I have set all Defined adaptors as safe and I have created a new safe Defined network with the range of IP addresses for the network I am connecting to. As suggested by AVG, I have set System services ESP, GRE, L2TP and PPTP as safe. I no longer have a UDP defined service. In my experience the network areas are created as and when new connections are made, giving you the chance to name them and assign a profile. Things now seem to be working.

Phil_Perry · 12-19-2008, 10:01 AM

Further information/update under my Small home or office network profile.
I now have defined services:
IGMP, other protocol, local port 0 - remote port 0
TCP, TCP protocol, both ways, local port 0 - 65535, remote port 0 - 65535
UDP, UDP protocol, both ways, local port 0 - 65535, remote port 0 - 65535
I have created a system service VPN that includes defined services IGMP and TCP. This is set as Allow for all.
I have modified Other Applications under Applications to include the three defined services IGMP, TCP and UDP, and set this to Allow for all.
I have modified Various System Services SVCHOST under Applications to include the UDP defined service. and set this as Allow for all.
I have a defined network covering the ip addresses of the network I am connecting to and set this as Safe.
My Small home or office network profile is assigned to my active network areas and adaptors.
As before, I have set defined services ESP, GRE, L2TP VPN and PPTP VPN to Allow for all.
This now works consistently on my XP Professional laptop but when I tried to apply the same thinking to a Vista box I got other problems. I spoke again to AVG who said that a new update was soon to be released that may help. They seem to acknowledge that VPN connections can be a problem area.
I don't know if any of this helps anybody.

gilespublic · 06-29-2009, 01:52 PM

Many thanks Phil Perry. I have been struggling with this, and it works now!

ramcast · 09-07-2009, 11:33 AM

Ok this may sound crazy but it worked for me. Go to AVG overview. Click Tools then Webshield add appropriate ports that you need open to the ones Webshield scans. I did this and a video streaming software worked like a charm. I narrowed it down by disabling all services and enabling one at a time till I narrowed down which component was causing the issue.

10-08-2008, 04:09 AM	#1 (permalink)
Notay Registered User Join Date: Oct 2008 Posts: 12 OS: XP Pro	AVG blocks VPN Hi (i hope this is the correct place to post this) i have created a vpn and avg will not allow it to access. I have allowed the GRE and ESP Protocols as avg website has said (http://www.avg.co.uk/faq.num-817?srch=using-vpn#faq_817) but this has not done anything in terms of allowing a connection. I have also allowed it in the 'defined adapters' tab in the firewall settings. I have contacted avg and they have failed to help me. can anyone please provide me with some help? thanks Notay

10-08-2008, 07:54 AM	#2 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,921 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Re: AVG blocks VPN Change from AVG to a product that works. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

10-09-2008, 07:12 AM	#3 (permalink)
Notay Registered User Join Date: Oct 2008 Posts: 12 OS: XP Pro	Re: AVG blocks VPN that would be easy but cannot afford to do so at the moment, any real help available?

10-09-2008, 09:11 AM	#4 (permalink)
JamesO Join Date: Mar 2005 Location: Fairfax, VA USA Posts: 2,289 OS: 98SE, W2k Pro, XP Pro	Re: AVG blocks VPN What makes you think AVG is the problem? Unless you have AVG with the firewall, I doubt AVG is blocking your VPN. Firewalls and anti-virus software should be configurable if there is anything that could or would impact the VPN. I would not get rid of AVG as I really do not think it is the problem. Either you have a different problem or AVG is not configured correctly. More information on what you have tired to do to troubleshoot and resolve the problem would be helpful. Need answers to some of the following: What OS? What are you using for a firewall? What router are you using? What ISP are you using? Also describe your VPN situation, software, hardware, what you are connecting to and do you know if you may possibly have private IP address conflicts? JamesO

10-09-2008, 11:23 AM	#5 (permalink)
Notay Registered User Join Date: Oct 2008 Posts: 12 OS: XP Pro	Re: AVG blocks VPN avg seems to be the likely problem since when i disable avg firewall, i am able to connect. i am using xp pro, avg internet security, netgeart router, sky isp. I connect to a private university vpn. i have tried to configure avg to allow it but to be honest i do not know much about protocols so am having a little difficulty thats why i asked on this board. i have also done exaclty what avg have said in the above link in the first post, read it.

10-09-2008, 12:16 PM	#6 (permalink)
JamesO Join Date: Mar 2005 Location: Fairfax, VA USA Posts: 2,289 OS: 98SE, W2k Pro, XP Pro	Re: AVG blocks VPN Ok, now we are getting somewhere. AVG Internet Security has the firewall as well. As I mentioned a firewall is the most likely problem. The issue is the firewall is not properly configured, it is actually doing its job! You need to turn the AVG firewall off, connect to the VPN, then do an IPCONFIG and find out what the VPN IP address range is. Then add the VPN IP address range into the firewall rules. This is the first thing I would try. Usually when you connect to a VPN, you get a new IP address assignment. Have had similar issues with Zone Alarm in the past as well. I do not have AVG Internet Security on any of my machines, but I might be able to access a machine with it if necessary. JamesO

10-11-2008, 01:28 PM	#7 (permalink)
Notay Registered User Join Date: Oct 2008 Posts: 12 OS: XP Pro	Re: AVG blocks VPN hi i did the ipconfig and added the ip address in the firewall settings - i clicked to add a new safe ip and entered the ip address of the vpn connection. However this still did not allow the vpn to be connected once i enabled the firewall on. I do not understand where i am going wrong or what i could be missing out

10-11-2008, 03:57 PM	#8 (permalink)
JamesO Join Date: Mar 2005 Location: Fairfax, VA USA Posts: 2,289 OS: 98SE, W2k Pro, XP Pro	Re: AVG blocks VPN Make sure you include the VPN gateway address. Not your IP address will change once you access the VPN. Also if you are trying to VPN and use remote desktop, you probably need to also add the remote desktop address as well. Check the AVG log to see if there is anything in the log that will clue you info what is going on. Look for blocked traffic in the Filter Device log. Again, it is most likely not a problem with AVG, it is just not configured correctly. JamesO

11-27-2008, 03:22 AM	#9 (permalink)
Phil_Perry Registered User Join Date: Nov 2008 Posts: 3 OS: Vista	Re: AVG blocks VPN I have been playing with AVG Internet security and had the same problem with a VPN connection. After looking at the Logs I realised that I needed to allow the UDP protocol. Under Defined services I created a new service for UDP. You can select the protocol and the ports and the direction. I set port 0 for local and remote and the direction as both ways. Then I created a System service to use this newly created Defined service. I also set the VPN connection under Defined adaptors to be safe. This was in addition to setting the System services ESP, GRE, L2TP and PPTP to safe.

11-29-2008, 12:32 PM	#10 (permalink)
Phil_Perry Registered User Join Date: Nov 2008 Posts: 3 OS: Vista	Re: AVG blocks VPN An update to my last message. I suggested that a UDP defined service was required. After experiencing other problems with the connection not staying up I went back to the drawing board. I now have only one profile in addition to the Allow all and Block all which you get anyway. My profile is Small home or office network. I have assigned this profile to all adaptors (which includes my VPN connection) and areas. Under this profile I have set all Defined adaptors as safe and I have created a new safe Defined network with the range of IP addresses for the network I am connecting to. As suggested by AVG, I have set System services ESP, GRE, L2TP and PPTP as safe. I no longer have a UDP defined service. In my experience the network areas are created as and when new connections are made, giving you the chance to name them and assign a profile. Things now seem to be working.

12-19-2008, 10:01 AM	#11 (permalink)
Phil_Perry Registered User Join Date: Nov 2008 Posts: 3 OS: Vista	Re: AVG blocks VPN Further information/update under my Small home or office network profile. I now have defined services: IGMP, other protocol, local port 0 - remote port 0 TCP, TCP protocol, both ways, local port 0 - 65535, remote port 0 - 65535 UDP, UDP protocol, both ways, local port 0 - 65535, remote port 0 - 65535 I have created a system service VPN that includes defined services IGMP and TCP. This is set as Allow for all. I have modified Other Applications under Applications to include the three defined services IGMP, TCP and UDP, and set this to Allow for all. I have modified Various System Services SVCHOST under Applications to include the UDP defined service. and set this as Allow for all. I have a defined network covering the ip addresses of the network I am connecting to and set this as Safe. My Small home or office network profile is assigned to my active network areas and adaptors. As before, I have set defined services ESP, GRE, L2TP VPN and PPTP VPN to Allow for all. This now works consistently on my XP Professional laptop but when I tried to apply the same thinking to a Vista box I got other problems. I spoke again to AVG who said that a new update was soon to be released that may help. They seem to acknowledge that VPN connections can be a problem area. I don't know if any of this helps anybody.

06-29-2009, 01:52 PM	#12 (permalink)
gilespublic Registered User Join Date: Jun 2009 Posts: 1 OS: xp sp2	Re: AVG blocks VPN Many thanks Phil Perry. I have been struggling with this, and it works now!

09-07-2009, 11:33 AM	#13 (permalink)
ramcast Registered User Join Date: Sep 2009 Posts: 1 OS: Vista	Re: AVG blocks VPN Ok this may sound crazy but it worked for me. Go to AVG overview. Click Tools then Webshield add appropriate ports that you need open to the ones Webshield scans. I did this and a video streaming software worked like a charm. I narrowed it down by disabling all services and enabling one at a time till I narrowed down which component was causing the issue.