Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Endpoint Protection => Topic started by: wpn on April 12, 2011, 05:04:27 PM

Title: install quirks and communication problems and others
Post by: wpn on April 12, 2011, 05:04:27 PM
Did a complete reinstall on a fresh VM from the SBC.
everything downloaded correct.

I started with the wrong domainname setting and my client wasnt configured with filesharing.
So after i ran into the error a few time finally the light started to turn on and i opened the client (and server) for remote installation.

I deployed, the setupfiles come on the client nicely
the remote installation service is installed and the installation starts.
In the logs on the SBC server i see the installation progress (so not in the console itself) on 70% and it stays there for 6 minutes.

I found this out in a second deployment.
The first deployment i rebooted before the 6 minutes was passed, so the installation didnt finished.
A remote installation didnt work anymore because of this. I deleted manually all the files from the HD and all the keys and values in the registry that had AVAST in them, and then the deployment worked again (which was the second deployment)
I also had the option to reinstall turned on.


The machine that i deploy to is a virtual machine. Its not connected to the internet. My whole test enviroment is seperate from the internet
except for machines where i choose to give a nic with internet.
Because of this i found out again (stated in Early beta release thread) that the just deployed client DOES NOT communicate with the SBC server.
It tries the update directly from the internet, which fails since it has no connection to internet.

In the avast5.ini in c:\programdata\avast...\  there is no reference to any server  (shouldnt this be avast6.ini or just avast.ini?)
the helpfile in c:\program files\..\avast\1043  it speaks of Avast 6 and it aimed on the home version, not the managed version


Tomorrow i will start with deploying to servers again


==edit==
server:  Win2k8 R2 (x64)
client:  Win7 NL(x32)
Title: Re: install quirks and communication problems and others
Post by: scythe944 on April 12, 2011, 08:33:23 PM
I just started the install on a Win 2k3 SP2 virtual server under virtualbox.  The installation installed IIS for me, but when it came to installing the .NET components, it told me that I had to download the WIC first.  Just a head's up if no one else has seen that yet.

Link to download the Windows Imaging Component: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=8e011506-6307-445b-b950-215def45ddd8&displaylang=en

Darn... forgot to make a snapshot before I started the install!  Ah well, no big deal.
Title: Re: install quirks and communication problems and others
Post by: scythe944 on April 12, 2011, 08:44:52 PM
Ok, got through all of the prereq's and started to install the SBC for the first time.

The one thing that I don't like is that it only asks for the administrator password for the console once, and it doesn't allow you to see what you're typing.

I know someone, somewhere will mis-type that and not be able to login.  Can you add a password verification box?
Title: Re: install quirks and communication problems and others
Post by: wpn on April 13, 2011, 01:10:55 PM
today i logged in and the status window told me there were new computers found....

its practically impossible so i checked the notification and this was what it said:  (see attachment)


the screenshot is from the notification from yesterday, the exact same notification is there today too
Title: Re: install quirks and communication problems and others
Post by: wpn on April 13, 2011, 02:00:08 PM
in the EARLY BETA thread i mentioned that i couldnt remote deploy the avast client to a server, this was because of the error that the used user account didnt have logon as service rights on the server  (i used the domain/enterprise/schema administrator)

i got the suggestion to manually give this user the rights for logon as service....

i did and the installation went correct...
with the server (just a clean server with SBC on it, no exchange or sharepoint) the installation didnt hang as stated at the client side for 6 minutes....
Tho i would like to see the SBC to be able to deploy to servers without having to add the account manually (or via GPO) to the logon as services security setting.

I didnt reboot the server yet and started the client software and it gave me an error about the language (see screenshot)
i figure that the 1033 is the code for the dutch language.... as stated in the for mentioned thread, i do not want my client to adjust the language itself... i want to keep it in english

in the screenshot you cna also see the remote deployment log to proof the deployment of the 70% was fast


can you also make a deployment option to put a shortcut or not on the desktop.... shortcuts of programs are usually the first thing i throw away from the desktop and specially from programs which i would access less then one time per month (on a server) if i have central management :)
its not urgent tho :)


====edit====
after a reboot of the server, i get the same error at login as shown in the attachment about the language....
This happens EVERY login...

it also seems that there are less avast services running because of the partial loading of the client.
I dont have a trayicon either
Title: Re: install quirks and communication problems and others
Post by: wpn on April 13, 2011, 03:52:16 PM
I booted with the Kaspersky rescuecd (had the iso hanging around my system) and i copied the 1043 folder and
renamed it to 1033 in  c:\program files\avast software\avast
Now my client did startup with an icon in the tray....
It was also localised into Dutch.... *hmmmm couldnt find the language files but still its in the localised language*

Next to that it didnt start all the shields  (see screenshot 3)  so i clicked on start  but after a couple seconds it turned off again.

A more positive note:  while i click on UPDATE to get the latest definitions, it took the definitions from the SBC server and named it by DNS name


this client is running on Win2k8 R2 (x64)



====edit====
I believe i found a possible cause of the notification that the services didnt start.
It is indeed 2 shields that i didnt activate on a SERVER....  IM shield and MAIL shield... they are not running and apparently dont start either when you click the START button (see screenshot).... Its on purpose that those shields dont run, i have chosen NOT to configure those in the SBC for this server group i made. Therefor it should signal the client that this status is acceptable and thus the whole machine is protected...
For the rest there is nowhere any logs to check for errors...

After manually starting those 2 services they also stopped automaticly again after couple seconds...
Title: Re: install quirks and communication problems and others
Post by: wpn on April 13, 2011, 04:24:29 PM
Seeing a client active in SBC is just sweeet, makes a lot of not working points good for a moment :D

there is however a difference in details between the SBC and the client self

in the screenshot you can see definitions numbers, they differ from client/sbc
Title: Re: install quirks and communication problems and others
Post by: scythe944 on April 13, 2011, 04:27:11 PM
Maybe the client doesn't see the SBC server and is updating from the internet, and the SBC server hasn't seen the client or had that version installed the last time that it talked to it?
Title: Re: install quirks and communication problems and others
Post by: wpn on April 13, 2011, 04:57:03 PM
Maybe the client doesn't see the SBC server and is updating from the internet, and the SBC server hasn't seen the client or had that version installed the last time that it talked to it?

i deployed the client from the SBC.........
im going to deploy to another server now cuz i realized that the deployed server install is on the SBC server itself and thus sees itself for that reason... (but still its nice to see an active computer in SBC)
i also made a new group for the new server deployment with everything activated so i can check if my previous found quirks are gone
Title: Re: install quirks and communication problems and others
Post by: wpn on April 13, 2011, 05:06:08 PM
the more i work in the scheduler tab the more i feel its too crowded and getting less readable everytime im in there

can there be a subsectioned part for it ?

subsections:
DEPLOY (different kind of (targetted) deploy jobs)
SCAN   (all kinds of (custom) scanjobs)
UPDATE (installing updates for defs and program updates)
MISC   (cleaning the logs and discovery)



i did a check for program updates (deployed 5 minutes before that, so no new program updates available) and the client on the server asked me to reboot because of that.


in all the deployment tasks i set the option to reboot after the job finished, none of the machines rebooted after deployment


i deployed to another server. The deployment went just fine. The program didnt come with the for-mentioned language problem (but i didnt start the gui before i rebooted like i did with the other deployment).

EXCEPT also this server doesnt connect to the SBC. It updates from internet, it doesnt show active in SBC....

conclusion: only the deployed client that is on the same computer as the SBC installation is shown in SBC as active


the MAIL SHIELD does not scan mails in outlook 2010.
I installed outlook 2010 on win7 (x32). This was AFTER avast was deployed.
I get no splash screen, the mail statistics dont show any scanned mails
I checked the boxes to attach messages to the mails for clean and infected mails
none of the mails i send or receive contain such notification in the headers or the body...


exchange plugin does not work (cant find it running anywhere so assuming it aint implemented yet?)
Title: Re: install quirks and communication problems and others
Post by: wpn on April 15, 2011, 10:03:28 AM
I wanted to fine tune (as far as this is possible in current release) the monitoring of shields....

see attachment... i cant monitor the anti-spam shield
Is this a choosen behaviour?  The mailshield is only on when a mailclient is in use, but it is monitored
therefor i would say the anti-spam should be monitored too....

or is it not build in yet?


after some changes in the group settings for the statusbar, my only computer that is monitored turned from orange to green

suggestion:  if in the SHIELD settings one of the shields is turned of as in not to use, automaticly turn of the statusbar too
i do not want to have mail and IM shields on my servers, so i turn tho off and if i dont manually turn the monitoring of in the statusbar
the software tells me im not completely safe since some services are not running