Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Endpoint Protection => Topic started by: ITG on November 11, 2012, 10:53:48 AM

Title: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 11, 2012, 10:53:48 AM
So I've had the End Point Protection for awhile, and I've just managed to manually do things, which is opposed to their entire philosophy of endpoint which is to save your time and allow everything to be done from one centralized management console.

Instead I've ran into issues deploying (only a few had to be manually installed), Its NEVER automatically updated the built in Mirror, its NEVER pushed out a new mirror update to managed clients (after a new SOA is installed) and its NEVER bypassed the Mirror server and go straight to the internet for updates on the workstations regardless of their group settings in the SOA console.

So my question is....... WHAT GIVES?  These are server 2008 R2 servers, updates to hell with no major issues.  Two separate client networks, totally different setups and both have the same issue.  I've NEVER had an out of box experience with this software where it worked remotely as advertised.

I have added port forwards to the network(s) 1 router (no managed switches on either network), I've checked windows firewalls (avast auto added the ports into this list on install), I've checked and made sure network sharing was enabled.  I have even attempted to manually do an update to the server's definition list for the Mirror... no luck.  What the heck else can I do?  I just want for the mirror to work or at least for each machine to just get updates.  I had some machines that virus databases were out of date for over a month when I first got into Endpoint.  This CANNOT happen.  Is there a way to push out an update from the Mirror to all machines in a group, or do you have to wait for it to come around on a set (non-configurable) time frame?

I will concede for a moment and assume its some small oversight on my part.  However, bare in mind that I have scoured these forums and the rest of the web for similar issues and found next to nothing.  The software documentation gives no explicit instructions on configuration for firewall or network setups to ensure proper operation... Its sad because I truly love the Avast products but the Endpoint solution has been a large disappointment, and I was seriously excited when I saw it go live.

Thanks for any help you can provide guys.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: giogio on November 11, 2012, 11:52:03 AM
Hi and welcome,
can you provide to us the version of the SOA console installed (is the 1.2.2.28 ?) and so the endpoint version (is the 7.0.1455 ?)
If you go under the SOA console, can you tell to us the mirror status under ADMIN->MIRROR ?
The endpoint are correctly display with ONLINE stutus under SOA console?
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 11, 2012, 12:02:21 PM
Yes the SOA version is 1.2.2.28 (Just updated today), endpoint version is 7.0.1455 as you have said.

Under ADMIN>MIRROR the status says "Done"  Error Code:  OK (nothing to do) (20000001)

The virus definition on this server is currently 121110-02 and it appears as though this was pushed out to all of the machines I currently have online.  However, the only reason this happened was that I upgraded the SOA from 1.2.2.8 to 1.2.2.28 and in that are usually somewhat up to date virus definitions.  Prior to the upgrade of the SOA, the MIRROR status was the same that I just posted.  This doesn't explain the behavior I'm seeing in the individual clients not going out to the internet for their updates when they fail to update via the local MIRROR.  Any clue why that may be?  Again, I confirmed the TCP ports needed in order to port forward through the router/firewall

TCP 25322
TCP 8732
TCP 8731

These are the 3 ports that Avast Endpoint/SOA adds into windows firewall by default.

Thanks Giogio for the quick reply.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: giogio on November 11, 2012, 12:09:25 PM
Hi,
I suggest to you to check again (today or tomorrow) if now the problem is now solved, with the new SOA 1.2.2.28 there's some bug fix.
If this not solve at all the problem try do disable the windows firewall.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 12, 2012, 01:19:38 AM
Ill check... but there is no reason that this update to 1.2.2.28 would have fixed the issue.  Afterall the other network with the same issue already had 1.2.2.28 and nothing has wormed right from the start.  Each network uses a totally different router, different brands even.  Assuming the SOA console does not just magically start working, what would your next suggestion be?  What sort of troubleshooting is there to do that ive not already done, short of getting out wireshark to monitor the failed sent requests for the updates.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 12, 2012, 12:49:43 PM
So having managed to get the older of the two to work (by updating it to 1.2.2.28 from 1.2.2.8 ).  It downloaded the most up to date definition and I can reliable (for now) update the Mirror.

However, looking at my second network that is having the same issues, I can't update it as when I download 1.2.2.28 and try to install it over the existing SOA of the same version, it tries to make me setup an entirely new console as though it were a first install, not an upgrade like the other one did.  So it asks for SMTP info, license file, admin password to be setup....  I don't want to touch that with a ten foot pole.

Well....  I found another method that I should have tried sooner. 

Manually closing down the mirror.exe via command line
Code: [Select]
taskkill /im mirror.exe -f

...and then running the mirror MANUALLY in command line.
Code: [Select]
CD C:\Program Files\AVAST Software\Administration Console\x64\then
Code: [Select]
Mirror.exe
The Mirror.exe will run the update process and give you feedback in the CMD window.  Here is what mine reads  :o

Code: [Select]
C:\Program Files\AVAST Software\Administration Console\x64>mirror.exe
mirror begin...
Mirroring...
Error (2000000C): Can't select any server for downloading (from 0).
 - the file servers.def is empty, corrupted, or missing.
 - all the servers are being updated right now - try again in a few minutes.
 - there were problems with current HTTP proxy settings and the list of available servers was emptied - try again, please.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 13, 2012, 07:41:38 AM
No suggestions anyone?  Sort of at a loss, not sure how to repair the servers.def file as I can't find it anywhere on the system that its working 100% on.  The server that I can find it on is the one not working and the file is in a separate AVAST sub-folder that is not Small Office Administrator.  I attempted to delete the file (after backing it up) and its write protected.  Attempted to use Unlocker to delete it, wasn't even given the option.  The file is about 2.5mb large and looking at the list there are hundreds of listed update servers.

Any advice people?
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: Avosec-UK on November 13, 2012, 10:08:00 AM
No suggestions anyone?  Sort of at a loss, not sure how to repair the servers.def file as I can't find it anywhere on the system that its working 100% on.  The server that I can find it on is the one not working and the file is in a separate AVAST sub-folder that is not Small Office Administrator.  I attempted to delete the file (after backing it up) and its write protected.  Attempted to use Unlocker to delete it, wasn't even given the option.  The file is about 2.5mb large and looking at the list there are hundreds of listed update servers.

Any advice people?
Check if mirror.exe is running on the system.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 13, 2012, 10:26:15 AM
Fixed the issue, I uninstalled the entire SOA program.  It has an option to save the SQL database so that you don't loose your data.  I was able to remove it and reinstall it, all of the machines connected just like it had never been uninstalled and it now actually downloads the updates for the server.

I still have another issue that isn't resolvable (currently).  I've got 3 machines (Windows XP Pro SP3) that will not connect to the console no matter what.  I've disabled the firewalls, uninstalled using the Avast uninstall utility, reinstalled via the "avast_managed.exe" and even tried to download the trail of Avast EndPoint and manually point to the manage console (SOA) server.  NOTHING.  Using the latest "avast_managed.exe" only installs it in a 30 day trail mode and does not prompt for the password (which signifies that it is connected to the SOA console).

Any advice on this last bit?
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: ITG on November 30, 2012, 07:28:14 AM
So apparently from when I got the Mirror to update properly on its own, it stopped working on the 23rd for one of my clients.  If I go into CMD and stop the mirror manually, I can literally spam the command to kill the process and it will always says success and list a new PID for the mirror.exe that is supposedly running.

I'm not sure whats up, but this seems to be an ongoing issue Avast.  This NEEDS to be fixed.  When talking about a business/corporate environment, stability trumps all.  This so far has been the most unstable software purchase I've made for a client thus far.  Please respond back ASAP as this being fixed is imperative.

Whats even more of a failure is the fact that individual clients totally ignore their group policy to download updates from the internet if they are unable to get update virus definitions from the Mirror.  Seems like as long as they can reach the mirror it is good enough.  Only one system actually updated itself, and that system leaves this LAN as its a laptop, so it looked to the net for an update.  This is a MAJOR and unacceptable flaw.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: Avosec-UK on November 30, 2012, 09:55:39 AM
So apparently from when I got the Mirror to update properly on its own, it stopped working on the 23rd for one of my clients.  If I go into CMD and stop the mirror manually, I can literally spam the command to kill the process and it will always says success and list a new PID for the mirror.exe that is supposedly running.

I'm not sure whats up, but this seems to be an ongoing issue Avast.  This NEEDS to be fixed.  When talking about a business/corporate environment, stability trumps all.  This so far has been the most unstable software purchase I've made for a client thus far.  Please respond back ASAP as this being fixed is imperative.

Whats even more of a failure is the fact that individual clients totally ignore their group policy to download updates from the internet if they are unable to get update virus definitions from the Mirror.  Seems like as long as they can reach the mirror it is good enough.  Only one system actually updated itself, and that system leaves this LAN as its a laptop, so it looked to the net for an update.  This is a MAJOR and unacceptable flaw.

Try to kill the process from Task Manager and start it from C:\Program Files\AVAST Software\Administration Console\x86\mirror.exe.
Title: Re: Endpoint and SOA - Mirror Updates fail + no managed client updates
Post by: sergeich on June 26, 2013, 12:11:41 AM
I had the same issue, reinstalled SOA just to get another month of normal operation... it's stuck again on a two month old defs with 20000001 status.

mirror begin...
Mirroring...
Using server: http://download351.avast.com/iavs5x
Using server: http://199.115.116.207/iavs5x
Setting product 'abp' files (703 of 708 set)
Resetting existing files (reset 703 files, leaving 0 files).
Using server: http://download405.avast.com/iavs5x
mirroring 'abp' - nothing to do.
Setting product 'ais' files (4 of 708 set)
Resetting existing files (reset 4 files, leaving 0 files).
Using server: http://download405.avast.com/iavs5x
mirroring 'ais' - nothing to do.
Mirroring done.
Building distributions...
Building distribution 'distrib0'
Setting product 'abp' files (703 of 708 set)
Resetting existing files (reset 703 files, leaving 0 files).
Setting product 'ais' files (4 of 708 set)
Resetting existing files (reset 4 files, leaving 0 files).
Building distribution 'distrib0' done.
Building distributions done.
Uploading distribution 'distrib0'
Sumarizing...
Setting product 'abp' files (703 of 708 set)
Setting product 'ais' files (704 of 708 set)

-------
Please, don't tell me to kill mirror.exe and run it manually, it's NOT gonna cut it. I can't re-install Avast every time it breaks either.

At this point this and other repetitive various failures of Avast software clearly indicate that the product is not ready for production operation and QA department is practically MIA.