Whilst this sounds like firewall blocking, I would have thought AIS would allow its own processes access, but perhaps not.
Does it allow avast.setup and avastSvc.exe internet access ?
- If it does delete the entry for them and do a manual update from the UI and reconnect to the internet, this should force the firewall to ask permission again.