License server glitch exposes SonicWall users to e-mail security threats
Vendor says it has fixed problem; angry customers blast company in user forum
Computerworld - A technical problem in a license management server at SonicWall Inc. created havoc earlier today for users of the company's e-mail security products, leaving many customers temporarily unprotected against spam, phishing and malware threats while others were unable to log into their own systems.
Colleen Nichols, a spokeswoman for SonicWall, said Tuesday evening that the Sunnyvale, Calif.-based vendor had resolved the server issue as of noontime PST and that affected customers could "resynchronize their licenses" by visiting the customer support section of the company's Web site.
It wasn't immediately clear how many customers were affected by the license server glitch. But numerous users posted angry messages on a forum on the SonicWall site during a period that lasted for several hours.
According to a user who reported the problem to Computerworld via e-mail, the glitch affected all customers of SonicWall's ES series of e-mail security appliances, based on what he was told by a person he described as the vendor's "general support ticket-taker."
The user, who asked not to be identified, said that during the overnight hours from Monday into Tuesday, SonicWall's license manager erroneously reset the license keys for products installed on his systems and those of other customers, thereby making the licenses appear to be invalid.
"Very early this morning," Nichols confirmed via e-mail, "one server in SonicWall's licensing server pool that handles distribution of [antivirus] signatures and license keys malfunctioned." The malfunction caused "some" license keys to be reset, requiring them to later be resynchronized with SonicWall's servers, she said.
The company shut off the problematic license server "shortly after it began malfunctioning, and at the same time proactively stopped automatic license key updates while we verified the integrity of the rest of our licensing servers," Nichols wrote. During that period, customers were still able to manually download updates and resynchronize their licenses through the company's Web site, she added.
Nichols said that SonicWall was working to contact customers believed to have been affected by the problem to ensure them that the technical issues had been resolved.
In posts on the user forum, a person named Jody Spoor who identified himself as a senior technical support engineer at SonicWall said that the company had been alerted about the problem "as early as we could be" and had taken immediate steps to prevent the issue from spreading further.
Typically, a problem with a license server shouldn't result in local product registration information being lost, Spoor said in one post. But for some reason, the registration information was lost "for a number of units," he added. Spoor recommended a manual work-around for affected customers while SonicWall worked to fix the technical snafu.
- Mitigating Multiple DDoS Attack Vectors It's time to rethink and refine the enterprise security architecture, so organizations can remain agile and resilient against future threats. Download this infographic...
- EndPoint Interactive eGuide In this eGuide, Network World, Computerworld, and CIO examine two endpoint trends - BYOD and collaboration - and offer tips and advice on...
- Reducing the cost and complexity of endpoint management IBM now offers simpler, more affordable solutions for improving endpoint security, patch compliance, lifecycle management and power management within midsized organizations. Read this...
- Agility & Scalability for Oracle EBS R12 and RAC on VMware vSphere 5 This white paper outlines extensive performance and scalability testing of Oracle EBS applications on a Vblock™ Systems with vSphere 5.
- Keep Servers Up and Running and Attackers in the Dark An SSL/TLS handshake requires at least 10 times more processing power on a server than on the client. SSL renegotiation attacks can readily...
- On Demand: Mastering the Art of Mobile Content Management Mobile device usage in the enterprise has skyrocketed, and it continues to escalate. IT must answer to users who demand access to their... All Endpoint Security White Papers | Webcasts