Remote Access Shield - FAQs

What is Remote Desktop?

Remote Desktop Protocol (RDP), commonly called Remote Desktop, allows you to connect to a computer from any location. If unprotected, hackers can use this security vulnerability to gain unwanted access to your computer.

How does Remote Access Shield protect my PC?

Remote Access Shield allows you to control which IP addresses can remotely access your PC, and blocks all other connection attempts. Remote Access Shield protects your PC by automatically blocking the following connections:

  • Brute-force attacks that repeatedly attempt to log in to your system
  • Remote Desktop exploits used by hackers to access your PC
  • High-risk IP address connections

Avast alerts you each time Remote Access Shield blocks a connection.

How do I enable Remote Access Shield?

  1. Ensure you have the latest version of Avast Premium Security installed on your PC.
  2. Go to ProtectionRemote Access Shield.
  3. Ensure the slider at the top is green (ON). We recommend keeping Remote Access Shield enabled at all times.
To temporarily disable Remote Access Shield, click the green (ON) slider so it changes to red (OFF), then select a time duration.

How can I manage Remote Access Shield's settings?

To modify the default and recommended settings:

  1. Open Avast Premium Security, and go to ProtectionRemote Access Shield.
  2. Click the (gear icon) in the top-right corner.
  3. Tick or untick the box next to the following features:
    • Enable RDP protection
    • Enable Samba protection
    • Notify me about blocked connection attempts
    • Block brute-force attacks
    • Block malicious IP addresses
    • Block Remote Desktop exploits
    • Block all connections except the following, then enter a trusted IP address and click Allow.

What is RDP protection?

Remote Desktop Protocol (RDP) allows a remote connection to access your PC. When RDP protection is enabled, Remote Access Shield monitors RDP connections to block any threats.

What is Samba protection?

Samba (SMB) allows a remote connection to share files in a network. When Samba protection is enabled, Remote Access Shield monitors SMB connections to block any threats.

How do I allow trusted connections only?

To specify allowed IP addresses:

  1. Open Avast Premium Security, and go to ProtectionRemote Access Shield.
  2. Click the (gear icon) in the top-right corner.
  3. Click ADD.
  4. Enter a trusted IP address or IP range, then click Allow. Added connections appear below the ADD button.
  5. Tick the box next to Block all connections except the following.
To remove a trusted connection, hover your cursor over the IP address and click the trash icon that appears.

Why am I receiving threat detection alerts?

You may receive alerts when Remote Access Shield automatically blocks the following:

  • High-risk IP addresses: Malicious IP addresses that are dangerous to RDP connections.
  • Brute-force attacks: Multiple unsuccessful log in attempts trying to access your PC.
  • Remote Desktop exploits: RDP vulnerabilities used by hackers to take control of your PC and spread malware.
  • False positives: A threat alert can be triggered when a device unsuccessfully tries to connect multiple times in a row. These could be legitimate connection attempts from a misconfigured device (for example, a device using the wrong credentials), or the device may be infected with malware and trying to access other devices in the network. Determine whether a blocked connection is a false positive in the following ways:
    • If the IP address is outside your internal network, check if it is a reported known attacker on https://www.abuseipdb.com/.
    • If the IP address is inside your internal network, use Avast Wi-Fi Inspector to find which device is triggering alerts. We recommend scanning the device with antivirus software or reinstalling antivirus software on the device, and keeping all network devices up to date.
To disable alerts, go to SettingsProtectionRemote Access Shield, then untick the box next to Notify me about blocked connection attempts.

How can I prevent further remote access attacks?

To protect your PC from threats:

  • Use strong passwords, including capital letters, numbers, special characters, and phrases.
  • Only allow trusted IP addresses to connect to your PC, and block all other connections.
  • Only allow RDP and SMB inside a Virtual Private Network (VPN). Use Avast SecureLine VPN to ensure a secure network connection that rejects attempts from outside IP addresses.
  • Avast Premium Security 20.x
  • Avast Omni 1.x
  • Microsoft Windows 10 Home / Pro / Enterprise / Education - 32 / 64-bit
  • Microsoft Windows 8.1 / Pro / Enterprise - 32 / 64-bit
  • Microsoft Windows 8 / Pro / Enterprise - 32 / 64-bit
  • Microsoft Windows 7 Home Basic / Home Premium / Professional / Enterprise / Ultimate - Service Pack 2, 32 / 64-bit

Was this article helpful?

Need additional help?

Contact us