License server glitch exposes SonicWall users to e-mail security threats
Vendor says it has fixed problem; angry customers blast company in user forum
Computerworld - A technical problem in a license management server at SonicWall Inc. created havoc earlier today for users of the company's e-mail security products, leaving many customers temporarily unprotected against spam, phishing and malware threats while others were unable to log into their own systems.
Colleen Nichols, a spokeswoman for SonicWall, said Tuesday evening that the Sunnyvale, Calif.-based vendor had resolved the server issue as of noontime PST and that affected customers could "resynchronize their licenses" by visiting the customer support section of the company's Web site.
It wasn't immediately clear how many customers were affected by the license server glitch. But numerous users posted angry messages on a forum on the SonicWall site during a period that lasted for several hours.
According to a user who reported the problem to Computerworld via e-mail, the glitch affected all customers of SonicWall's ES series of e-mail security appliances, based on what he was told by a person he described as the vendor's "general support ticket-taker."
The user, who asked not to be identified, said that during the overnight hours from Monday into Tuesday, SonicWall's license manager erroneously reset the license keys for products installed on his systems and those of other customers, thereby making the licenses appear to be invalid.
"Very early this morning," Nichols confirmed via e-mail, "one server in SonicWall's licensing server pool that handles distribution of [antivirus] signatures and license keys malfunctioned." The malfunction caused "some" license keys to be reset, requiring them to later be resynchronized with SonicWall's servers, she said.
The company shut off the problematic license server "shortly after it began malfunctioning, and at the same time proactively stopped automatic license key updates while we verified the integrity of the rest of our licensing servers," Nichols wrote. During that period, customers were still able to manually download updates and resynchronize their licenses through the company's Web site, she added.
Nichols said that SonicWall was working to contact customers believed to have been affected by the problem to ensure them that the technical issues had been resolved.
In posts on the user forum, a person named Jody Spoor who identified himself as a senior technical support engineer at SonicWall said that the company had been alerted about the problem "as early as we could be" and had taken immediate steps to prevent the issue from spreading further.
Typically, a problem with a license server shouldn't result in local product registration information being lost, Spoor said in one post. But for some reason, the registration information was lost "for a number of units," he added. Spoor recommended a manual work-around for affected customers while SonicWall worked to fix the technical snafu.
- EndPoint Interactive eGuide In this eGuide, Network World, Computerworld, and CIO examine two endpoint trends - BYOD and collaboration - and offer tips and advice on...
- Reducing the cost and complexity of endpoint management IBM now offers simpler, more affordable solutions for improving endpoint security, patch compliance, lifecycle management and power management within midsized organizations. Read this...
- Big Data, Big Mess: Sound Risk Intelligence Through Complete Context This paper examines the insecurity of the small businesses in the supply chain and offers tips to close those backdoors into the enterprise.
- Using Cyber Insurance and Cybercrime Data to Limit Your Business Risk This paper examines the challenges of understanding cyber risks, the importance of having the right cyber risk intelligence, and how to use this...
- NSS Labs & Cisco Present: Evaluating Leading Breach Detection Systems Today's constantly evolving advanced malware and APTs can evade point-in-time defenses to penetrate networks. Security professionals must evolve their strategy in lockstep to...
- Will the Real Endpoint Threat Detection and Response Please Stand Up? This webinar explores new technologies & process for protecting endpoints from advanced attackers as well as the innovations that are pushing the envelope... All Endpoint Security White Papers | Webcasts