WebShield scans the traffic on port 80 (default).
avast connects at port 80 to update.
Without this port, no connection.

Glad you’re clean from Symantec leftovers…