Friday, August 31, 2018

Avast Business Installer Installation Failed: Unable to Load Policy

Our team just installed Management console for Avast Business Antivirus, Avast Business Antivirus Pro and Avast Business Antivirus Pro Plus On local server (on-premise) on Windows 2008 Server R2. The server got IP Public, so all PC outside the office can install the Avast Business Installer generated from the console.

Unfortunately, we got error 'Installation Failed: Unable to Load Policy' during setup process.


After discuss with support from Avast reseller in Indonesia, we also discuss with support directly from Avast. They said there are a few things we can try to correct it. 
  1. Was there any Avast products on the server before? If yes, please remove using Avast clear to make sure everything is removed. Download from https://www.avast.com/uninstall-utility
  2. Make sure to remove all Anti-Virus programs before installation.
  3. Disable any local firewalls that may be preventing the program from running.
  4. Please make sure to download a new copy once you have made sure the other items are correct. 
  5. Login to business.avast.com portal (note: we use another address because our console installed in our own portal) and navigate to Add New Device > Customize > Choose options > Download.

Avast support suggest doing the full installer. Also, after downloading and before installing "right click" on the file and select "Properties". Sometimes there will be a Security option at the bottom, make sure to unblock the program as shown in the screenshot below. 



The client/cloud server communication is completed using the following ports. To ensure proper communication to the cloud portal please make sure all ports below are open and also the whitelisting of *.avast.com.

- http/80 (updates) 
- https/443 (FFL encryption key negotiation) 
- TCP, UDP/ 443, 53 for secure DNS 
- *.avast.com
- 77.234.40.0/21 Update servers

After I tried the solutions, they dont work!

Then I tried to check all ports used to communicate between client and server, and got that Avast use 8080/8090 for server/client stuff. After out network admin open the port, then the installation work seamlessly.