WebShield scans the traffic on port 80 (default). avast connects at port 80 to update. Without this port, no connection.
Glad you’re clean from Symantec leftovers…