License server glitch exposes SonicWall users to e-mail security threats
Vendor says it has fixed problem; angry customers blast company in user forum
Computerworld - A technical problem in a license management server at SonicWall Inc. created havoc earlier today for users of the company's e-mail security products, leaving many customers temporarily unprotected against spam, phishing and malware threats while others were unable to log into their own systems.
Colleen Nichols, a spokeswoman for SonicWall, said Tuesday evening that the Sunnyvale, Calif.-based vendor had resolved the server issue as of noontime PST and that affected customers could "resynchronize their licenses" by visiting the customer support section of the company's Web site.
It wasn't immediately clear how many customers were affected by the license server glitch. But numerous users posted angry messages on a forum on the SonicWall site during a period that lasted for several hours.
According to a user who reported the problem to Computerworld via e-mail, the glitch affected all customers of SonicWall's ES series of e-mail security appliances, based on what he was told by a person he described as the vendor's "general support ticket-taker."
The user, who asked not to be identified, said that during the overnight hours from Monday into Tuesday, SonicWall's license manager erroneously reset the license keys for products installed on his systems and those of other customers, thereby making the licenses appear to be invalid.
"Very early this morning," Nichols confirmed via e-mail, "one server in SonicWall's licensing server pool that handles distribution of [antivirus] signatures and license keys malfunctioned." The malfunction caused "some" license keys to be reset, requiring them to later be resynchronized with SonicWall's servers, she said.
The company shut off the problematic license server "shortly after it began malfunctioning, and at the same time proactively stopped automatic license key updates while we verified the integrity of the rest of our licensing servers," Nichols wrote. During that period, customers were still able to manually download updates and resynchronize their licenses through the company's Web site, she added.
Nichols said that SonicWall was working to contact customers believed to have been affected by the problem to ensure them that the technical issues had been resolved.
In posts on the user forum, a person named Jody Spoor who identified himself as a senior technical support engineer at SonicWall said that the company had been alerted about the problem "as early as we could be" and had taken immediate steps to prevent the issue from spreading further.
Typically, a problem with a license server shouldn't result in local product registration information being lost, Spoor said in one post. But for some reason, the registration information was lost "for a number of units," he added. Spoor recommended a manual work-around for affected customers while SonicWall worked to fix the technical snafu.
- SANS: Next-Generation Datacenters = Next-Generation Security This whitepaper takes a look at some new technology that may allow security teams to implement more flexible and capable protection models in...
- SANS: Protecting Virtual Endpoints with McAfee Server Security Suite Essentials SANS review of McAfees Server Security Suite Essentials that address some of the emerging challenges of securing virtual platforms and cloud environments.
- Mitigating Multiple DDoS Attack Vectors It's time to rethink and refine the enterprise security architecture, so organizations can remain agile and resilient against future threats. Download this infographic...
- EndPoint Interactive eGuide In this eGuide, Network World, Computerworld, and CIO examine two endpoint trends - BYOD and collaboration - and offer tips and advice on...
- Accelerate your innovation with IBM Bluemix™ Join us for a webcast introducing the new IBM BluemixTM. IBM Bluemix (www.bluemix.net) is a developer oriented Platform as a Service (PaaS) environment...
- Maximizing Availability for the Modern Data Center Check out this information-packed resource center for help in maximizing the availability of your data center - from overcoming challenges to choosing the... All Endpoint Security White Papers | Webcasts