avira has a web scanner it actually has two guard settings > java and javaw has to be allowed through both of them.

thats only one of them and if you look carefully at the 2nd image there is also a web guard option