Avast Business Managed: "DNS Resolve has failed"

Hello,

I’m using Avast Business Manages (cloud hosting). At the moment none of my clients can retrieve (definition) updates. I allways get the error “DNS Resolve has failed”.

Any Ideas? Which URL ist Avast resolving there? (If you can give me the url I can check my dns Server for problems). But any other DNS Requests work properly.

Thx

I am having the same issue. All of my machines are unable to pull updates from the server with the “DNS resolve has failed” error.

Same issue here.

Hi,

We are receiving many reports of this from On-premise and Cloud based console installs.(with or without local update mirror/master agents)

Can we speedily resolve?

We are using cloud based management console and already tested with and without local update mirror.
Problem also seen at multiple multiple sites (we are IT solution provider and installed Avast Business at multiple customer’s sites).

Best regards.

Ditto.

Some of our customer installations seem to work fine. But others are suffering from the DNS Resolve has failed problem. This is despite changing DNS servers to Google’s DNS to see if this worked (it didn’t). Reinstalling on one Windows 10 machine has worked. But reinstalling on a Windows Server 2012 computer didn’t.

Looking forward to a resolution…

Hi guys, I forwarded it. Let’s see…

Can you, please, generate support package and send us package ID? How to generate support package can be found at [s]https://support.avast.com/cs-cz/article/Submit-support-file[/s] https://support.avast.com/en-ww/article/Submit-support-file (thanks Asyn)

English version: https://support.avast.com/en-ww/article/Submit-support-file

I’ve been seeing this same issue for the best part of 2 weeks now on my entire estate with Avast Business Cloudcare.

Several conference calls with Avast 2/3 tier (when they’re not a. Not in at the time we’ve been told to call or b. On vacation!!!) via our re-seller and the best they can come up with - “it’s your DNS”.

I’d post my reply to that - but it is unprintable in polite language. I’m also going to forward a link to this topic to my re-seller. It might help them focus their anger on Avast when the revenue stream from us is terminated because Avast have broken something and refuse to even admit they have a problem.

Same issue for the last two weeks, cloud 900 users. Please just fix it avast just moved over to Avast come on Avast.

Also seeing this since June. I am looking for a refund for all the time that was paid for and protection defunked. This is not ok, this needs to be addressed ASAP. This is not business class.

Unless we see your specific support package, we cannot say if it is the same issue. When avast cannot get package with one method it tries another cycling IPv4 and IPv6 and http and https and using curl and winhttp. Messages in the log might be misleading. For instance some hosts do not resolve to IPv6 (intentionally) and such retry is always logged. If your log looks like snippet below, problem is with highlighted lines, remaining stuff in the log (DNS resolving) is just consequence that avast could not connect to server. We are continuing investigation and once we know more we will let you now.

[2018-07-13 02:32:38.193] [warning] [settings ] [ 4672: 3904] Did not find any values in file ‘C:\ProgramData\AVAST Software\Avast\burger_client.ini’
[2018-07-13 02:32:39.865] [error ] [Ares ] [ 4672: 3064] Unable to resolve hosts after 1671 ms (258, ?)
[2018-07-13 02:32:39.880] [info ] [servers ] [ 4672: 3064] ‘http://w3072800.iabs.u.avast.com/iabs’ with [62.245.136.56] chosen for ‘program’
[2018-07-13 02:33:01.084] [error ] [Curl ] [ 4672: 3064] ‘http://w3072800.iabs.u.avast.com/iabs/servers.def.vpx’ from [62.245.136.56] was not downloaded (12007, Couldn’t connect to server)

[2018-07-13 02:33:01.084] [warning] [dldwrap ] [ 4672: 3064] HttpGet: download type switched to WinHttp IPv4
[2018-07-13 02:33:03.084] [info ] [servers ] [ 4672: 3064] ‘http://d3831337.iabs.u.avast.com/iabs’ with [62.245.136.56] chosen for ‘program’
[2018-07-13 02:33:24.099] [error ] [WinHttp ] [ 4672: 3064] ‘http://d3831337.iabs.u.avast.com/iabs/servers.def.vpx’ from [62.245.136.56] was not downloaded (12002, ?)
[2018-07-13 02:33:24.099] [warning] [dldwrap ] [ 4672: 3064] HttpGet: download type switched to Curl IPv6
[2018-07-13 02:33:26.099] [warning] [servers ] [ 4672: 3064] There is no suitable url for ‘program’ with IPv6 and http
[2018-07-13 02:33:26.099] [warning] [dldwrap ] [ 4672: 3064] HttpGet: download type switched to WinHttp IPv6
[2018-07-13 02:33:29.771] [error ] [Ares ] [ 4672: 3064] Unable to resolve hosts after 1671 ms (258, ?)
[2018-07-13 02:33:29.771] [warning] [servers ] [ 4672: 3064] There is no suitable url for ‘program’ with IPv6 and http
[2018-07-13 02:33:29.771] [warning] [dldwrap ] [ 4672: 3064] HttpGet: download type switched to Curl IPv4

You’ll be contacted by technical support representatives in order to get debug log files.

In my case I see “DNS resolve has failed” only for machines which are placed under Group with “Always update from Avast servers” checkbox is clear.
But after that failure error display updates are being pulled from Local Update server (located by IP address), you can see the screenshots in attached screenshots.
I guess “DNS resolve has failed” relates to failure to resolve Local Update server hostname.

When “Always update from Avast servers” checkbox is checked, then no DNS resolve error is displayed and updates are pulled only from Internet.

I sent my support package over a week ago and I am yet to hear anything from Avast. How widespread is this issue? What is the ETA on a fix?

Any update on this matter?

A solution must be speedily created as a lot of our clients are looking elsewhere for AV solutions from competitors

We’re still not able to reproduce the issue locally in case of Avast Business Managed Antivirus. We found an issue in Mirror which caused similar problems in AV managed by CloudCare or Managed Workplace. From all the support packages we got is still unclear what is wrong.

Could you please try to download the following file manually on the device where the resolution failed
http://w3072800.iabs.u.avast.com/iabs/servers.def.vpx

Could you please also try traceroute following URL/IPs and share a result with us?

tracert w3072800.iabs.u.avast.com tracert 8.8.8.8 tracert 8.8.4.4

I’m having this same issue across multiple client systems in different offices. All other DNS functions are fine. All of my clients are managed through CloudCare and all are on 4.3.1.

My test machine currently does have the “DNS Resolve Failed” issue but can download the server.def.vpx file below with no issue.

tracert info: Local IP addresses removed

Tracing route to a428.dscd.akamai.net [184.27.199.33]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms xxxxxxxx
2 9 ms 9 ms 3 ms xxxxxxxx-static.hfc.comcastbusiness.net [xxxxxxxx]
3 31 ms 29 ms 29 ms 96.120.14.37
4 17 ms 11 ms 21 ms ae-222-rur01.sacramento.ca.ccal.comcast.net [68.87.203.69]
5 26 ms 31 ms 19 ms ae-2-ar01.sacramento.ca.ccal.comcast.net [162.151.18.133]
6 28 ms 20 ms 19 ms a184-27-199-33.deploy.static.akamaitechnologies.com [184.27.199.33]

Trace complete.

Tracing route to google-public-dns-a.google.com [8.8.8.8]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms xxxxxxxxxxxxxxx
2 2 ms 5 ms 1 ms xxxxxxxxxxxx-static.hfc.comcastbusiness.net [xxxxxxxxxxxx]
3 28 ms 27 ms 29 ms 96.120.14.37
4 28 ms 29 ms 29 ms ae-222-rur01.sacramento.ca.ccal.comcast.net [68.87.203.69]
5 16 ms 29 ms 19 ms ae-2-ar01.sacramento.ca.ccal.comcast.net [162.151.18.133]
6 24 ms 29 ms 29 ms be-33667-cr01.9greatoaks.ca.ibone.comcast.net [68.86.93.25]
7 30 ms 29 ms 30 ms be-12578-pe04.9greatoaks.ca.ibone.comcast.net [68.86.88.18]
8 23 ms 39 ms 29 ms 96-87-8-246-static.hfc.comcastbusiness.net [96.87.8.246]
9 * * * Request timed out.
10 30 ms 25 ms 19 ms 108.170.237.104
11 27 ms 29 ms 39 ms 108.170.232.61
12 26 ms 29 ms 29 ms google-public-dns-a.google.com [8.8.8.8]

Tracing route to google-public-dns-b.google.com [8.8.4.4]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms xxxxxxxxxxxxx
2 3 ms 9 ms 3 ms xxxxxxxxxxxxx-static.hfc.comcastbusiness.net [xxxxxxxxxxxx]
3 27 ms 29 ms 19 ms 96.120.14.37
4 17 ms 19 ms 21 ms ae-222-rur01.sacramento.ca.ccal.comcast.net [68.87.203.69]
5 11 ms 28 ms 23 ms ae-2-ar01.sacramento.ca.ccal.comcast.net [162.151.18.133]
6 23 ms 30 ms 28 ms be-33667-cr01.9greatoaks.ca.ibone.comcast.net [68.86.93.25]
7 21 ms 29 ms 22 ms be-12544-pe01.9greatoaks.ca.ibone.comcast.net [68.86.87.150]
8 28 ms 29 ms 23 ms fonality-cr01.losangeles.ca.ibone.comcast.net [75.149.228.74]
9 * * * Request timed out.
10 25 ms 29 ms 40 ms 209.85.248.34
11 26 ms 29 ms 29 ms 209.85.142.235
12 17 ms 29 ms 28 ms google-public-dns-b.google.com [8.8.4.4]

Trace complete.

Hi jetcosys,

please, could you upload technical support package and write here back the package id? There is a link how to do it: https://support.avast.com/en-ww/article/Submit-support-file

Thank you in advance