That’s not correct.
If you use Web shield every connection attempt is sent from your browser or application to avast’s local proxy port 12080, and avastsvc.exe, the service, makes the connection for you. Just watch your firewall logs :slight_smile: Avastsvc.exe is listening on a bunch of ports on purpose, so that it can examine the content for crapware.

AvastUI.exe connects only for updates to avast servers, or akamai, plus yes, google analytics.