Usually, you have a client communication port that is not open, when you push, but get no license (AEA):
In a new AEA installation, the default firewall rules configured automatically are:
avast! ADNM Agent access: TCP 16111
avast! ADNM AMS discovery: UDP 6000
avast! ADNM Cisco NAC access: TCP 16103
avast! ADNM Console access: TCP 16102
avast! ADNM Mirror access: TCP 5033
But, you need:
AEA Mirror: TCP 16135
AEA Client Communication Port: TCP 16136
AEA Client Communication Port: TCP 16139
And you have to configure these manually in the Windows Firewall.
Thanks again to Ed!