Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Bug Security Software IT

Ask Slashdot: Dealing With an Unresponsive Manufacturer Who Doesn't Fix Bugs? 204

moofo writes: I've had huge problems with a security appliance since its installation. Specifically, the VPN SSL client is causing a problem for the majority of my remote clients. The company acknowledged the bug, but they are jerking me around, and no resolution is in sight. I tried third-party clients, but I'm wary of using them since they are not distributed by the manufacturer, and they require some maintenance to keep working properly.

I also talked to various executives at the company and besides giving me apologies, nothing good is coming my way. It's been more than two years (on a three-year subscription that I can't terminate early), and this is continually causing me trouble and aggravation. It also makes my internal customers unhappy. How do you deal with a manufacturer who doesn't fix bugs in a reasonable time frame?
This discussion has been archived. No new comments can be posted.

Ask Slashdot: Dealing With an Unresponsive Manufacturer Who Doesn't Fix Bugs?

Comments Filter:
  • The name (Score:5, Interesting)

    by Anonymous Coward on Wednesday October 08, 2014 @01:15PM (#48093739)

    One way is to give the public the name!

    • Re:The name (Score:4, Informative)

      by ShanghaiBill ( 739463 ) on Wednesday October 08, 2014 @01:30PM (#48093983)

      One way is to give the public the name!

      This is a VERY good suggestion. Why is the company not being named? If the company sees their name being publicly dragged through the mud, they are likely to make customer service a higher priority. Public reviews and customer-to-customer communication facilitated by Amazon, eBay, etc. have done wonders for customer service.

      • Re: (Score:2, Insightful)

        by Anonymous Coward

        Problem is that a lot of vendors will immediately turn around and sue for libel/slander, as in the case of places that got one star reviews on websites, and part of the injunctive relief asked is to retract all statements, true or no.

        Of course, here in the US, the truth is a defense... but realistically, legal cases tend to be won by who has the deeper pockets.

        So, not naming a vendor right off is a wise thing. They can easily retaliate (such as the business who got someone terminated) in other ways.

        • Re:The name (Score:5, Insightful)

          by ShanghaiBill ( 739463 ) on Wednesday October 08, 2014 @01:57PM (#48094367)

          Problem is that a lot of vendors will immediately turn around and sue for libel/slander

          In America, the truth is an absolute defense against libel/slander. As long as you have documented your accusations, you have little to worry about. Anyway, good luck serving "moofo" with a subpoena.

          • This is true but like you said it's a defense. Anyone can sue anyone and you can spend a lot of money, and time dealing with it. I doubt they would do that though, it's be easier to make it right or refund your money.
          • As long as you have documented your accusations, you have little to worry about.

            Well, other than being bankrupted before the judge is ready to rule on the issue...

          • The summary gives some information about moofo:

            "I also talked to various executives at the company and besides giving me apologies, nothing good is coming my way. It's been more than two years (on a three-year subscription that I can't terminate early)"

            How many customers do you think have spoken to multiple executives at the security company? That may narrow down the number of people who could be moofo. [Assuming moofo is telling the truth about that; it could have been a misdirection.] The duration and ter

          • In America, the truth is an absolute defense against libel/slander. As long as you have documented your accusations, you have little to worry about.

            Except for perhaps going bankrupt defending yourself. Being right isn't worth much if you get put out of business proving that fact. Accusing a large company with flesh eating lawyers of anything publicly can result in a very costly lawsuit regardless of the merits of the case.

            • Except for perhaps going bankrupt defending yourself.

              What's even more fun is if you do win, and then *they* BK on you. Then you're on the hook for more time and money trying to collect on a judgment that you quite possibly won't see a penny of.
          • In America, you go to court to win a moral victory, and lose all your money in the process.
      • Or sue...
    • Re:The name (Score:4, Interesting)

      by Jawnn ( 445279 ) on Wednesday October 08, 2014 @01:49PM (#48094263)
      I was thinking the same thing. At least give us a hint. Something like, "A major security appliance vendor, who was recently acquired by major tech company which is based in Austin..."
      Full disclosure: we own some of those and have several very similar issues with their support offerings, so the OP's complaint definitely resonates.
      • by tibit ( 1762298 )

        I'd have hoped that most "appliances" are just silly to make and use these days, what with virtualization etc. You should be buying a vm image, not a piece of hardware.

        • You should be buying a vm image, not a piece of hardware.

          Unless you're trying to do something like put an IPMI port behind a firewall. A VM running on the machine to be protected won't be of much use there.
          • by Jawnn ( 445279 )

            You should be buying a vm image, not a piece of hardware. Unless you're trying to do something like put an IPMI port behind a firewall. A VM running on the machine to be protected won't be of much use there.

            Yeah, well, some people can't see outside their little box. To be fair, there are places where that model works, but fronting a remote virtualization stack, alone with a few pieces of dedicated hardware that must be available even when the virtualization stack is down, is not one of them.

    • Better yet, just forward this /. link to them now. Let em read all the creative suggestions.
  • That may give you some rights. Post a link to the EULA, please.

    • by Richard_at_work ( 517087 ) on Wednesday October 08, 2014 @01:22PM (#48093853)

      And if it doesn't, why the hell didn't someone flag that up before signing on for 3 years of payments with no legal recourse? The problem isn't really the vendor here, its the dumb ass that signed the contract which allows the vendor to get away with shit like this.

      Pull the contract, when they threaten to sue for breach then you threaten to counter sue for non-performance and non-compliance as the product isn't fit for use.

      • by jmcharry ( 608079 ) on Wednesday October 08, 2014 @02:46PM (#48095105)

        I think it is normal to start with a "cure letter" telling them they are in default on the contract and giving them 30 days to come into compliance or face termination. This usually leads to something both sides can live with.

        • by St.Creed ( 853824 ) on Wednesday October 08, 2014 @02:55PM (#48095277)

          That's exactly the right way where I live. You start with a complaint, then escalate with a letter giving them a last chance to fix the issues. You give them a reasonable term, such as 30 days. After that, you terminate the contract and ask for your money back due to breach of contract.

          You'll be much better off if you let a lawyer handle this sort of thing, by the way. But that goes for signing the contract in the first place, too.

  • by MobyDisk ( 75490 ) on Wednesday October 08, 2014 @01:15PM (#48093753) Homepage

    If you have a legitimate beef with the manufacturer, why hide their name? You might find others with the same problem.

    • by geekoid ( 135745 )

      Because he might want to have a decent relationship with them? Other then this issue, it might be a great product, might be getting a discount and so on.

      • Because he might want to have a decent relationship with them? Other then this issue, it might be a great product, might be getting a discount and so on.

        Future relationship?!?

        So they can buy *more* products with bugs an unresponsive support in the future? I can see why you'd want to protect *that* relationship...

  • by doug ( 926 ) on Wednesday October 08, 2014 @01:17PM (#48093787)
    Why not just bad mouth them. If they get a reputation for poor service, then so be it. This shouldn't be anyone's first approach, but if you've tried for over a year and they're not living up to your expectations, then they squandered more than one chance to do better.
  • by nyet ( 19118 ) on Wednesday October 08, 2014 @01:18PM (#48093793) Homepage
    You chose your vendor poorly. Hope you learned from it. Next time choose a standards based VPN solution that works across many different platforms and clients.
    • by geekoid ( 135745 )

      Why is victim blaming getting worse? THEY aren't living up t the contract. SO it's not HIS bed.
      He should sue for non-compliance.

      • by fuzzyfuzzyfungus ( 1223518 ) on Wednesday October 08, 2014 @01:47PM (#48094225) Journal
        Unless he got a fairly amazing contract, 'sucky and frustrating but more or less functional' will meet or exceed anything they actually made a legally binding promise to deliver.

        It's not as though he had a very good shot at getting a better contract(better product, possibly; but even that vendor wouldn't actually promise any more), so I wouldn't be inclined to blame him; but it'd take some seriously impressive suck to actually give him any legal ground to work with.
      • If he had chosen a standards compliant open-source VPN solution, then he would not have to sue. He could hire programmers to fix the problem himself, rather than hiring lawyers to sue the company and hope that someday two years from now the problem is resolved.

        • So your suggested solution is a time machine and self-support?

          I'd like to introduce you to Bossy, the Spherical Cow.

      • by nyet ( 19118 )

        Suing likely will cost more than just eating the remainder of the service contract, AND has no guarantee of success.

        This is why the whole "proprietary software is supported so it has a lower TCO" is often a myth.

        Lockin always has risk, and to that extent, presents a very real cost.

    • Oh, so simple! Complex products in complex environments always pose a threat every time you roll the dice by selecting one or even applying an update. The devil is in the details. Yet, simple finger-pointing responses like this are about all you can expect from a typically commenter on the Internet, regardless of the issue at hand.
    • by Jawnn ( 445279 )

      You chose your vendor poorly. Hope you learned from it. Next time choose a standards based VPN solution that works across many different platforms and clients.

      Perhaps. Three years is a long time. Companies change hands and I am here to tell you that the importance that one vendor places on supporting their product often becomes an expense to be trimmed when that company is acquired by another. May you never have to learn just how bad that can get.

    • While I agree with gist of your sentiment, you're making the assumption that the submitter was able to make the choice of vendor. Not all of us get to choose which technologies we're required to support. Maybe a pointy-haired boss told the guy to go with the vendor because his buddy, the vendor's CEO, let's him win at golf.

      • His buddy doesn't even have to be with the vendor at all. You would be surprised at how many PHBs will make a tech choice based around what one of their friends use and presents as cool.

        I used to push (recomend) a groupware/email solution for small businesses i had as clients. It has its own email server without all the hassles of exchange either. It has killer tech support too. Anyways, one of the partners at a lawfirm saw a golf buddy checking his work email on his cell phone. Instead of that partner just

  • Simple. (Score:5, Insightful)

    by Dzimas ( 547818 ) on Wednesday October 08, 2014 @01:18PM (#48093805)

    If your company is large enough, have a quick chat with your legal department. A 3 year support contract that isn't providing you with any value is something that's worth addressing. A brief letter from your legal counsel ought to result in an interesting response (whether or not it results in action is another thing entirely).

    • It might help that 'appliance' pricing tends to be fairly close to software pricing; but with thousand to few thousand dollars worth of vaguely custom server thrown in. Unlike the price for hardware (especially the lower end commodity stuff), where the vendor is looking at actual losses (in shipping, refurbishing, and selling formerly new goods at refurb prices), much of the price of your appliance is probably copies of software and some sort of support agreement.

      Not that they'll want to forgo profit; bu
  • If you're trying to get slashdot to finally deal with some of their old bugs, I'm not sure that shaming them on their own front page is the way to do it. Granted, the exodus of users hasn't done it, either...
  • Offer money. If uninterested, offer more money. Repeat until desired result obtained.

  • How do you deal with a manufacturer who doesn't fix bugs in a reasonable time frame?

    Here are your choices:

    1. Complain to BBB or outright sue them.
    2. Lobby your elected officials to pressure existing regulatory authorities to withdraw their certification. If no such certification is currently required, the bureaucrats will be happy to introduce it for you (and for themselves).
    3. Throw out their equipment and buy from a competitor

    I tend to prefer the third option, although I've registered my displeasure on BBB on a few occasions too.

    It's been more than two years (on a three-year subscription that I can't terminate early)

    You may not be able to stop paying for the contract (be sure your next one is better worded, though), but you can stop using the service — as soon as you find a replacement...

    • by tepples ( 727027 )

      Throw out their equipment and buy from a competitor. I tend to prefer [this] option

      Unless the company has a government-granted monopoly under one of the "intellectual prohibition" or "imaginary property" rights, with the state-backed power to sue any competitor's interoperable product out of existence.

      • by mi ( 197448 )
        Fortunately, no such companies exist — not in the security-appliance market, so let's not get off-topic, shall we?
  • Stop paying. (Score:4, Interesting)

    by Nick Lowe ( 3421741 ) on Wednesday October 08, 2014 @01:27PM (#48093937)
    Just stop paying the subscription and inform to them upfront that you consider them to have terminated the contract through their own negligence. Go elsewhere.
    • Re:Stop paying. (Score:5, Insightful)

      by AltGrendel ( 175092 ) <(su.0tixe) (ta) (todhsals-ga)> on Wednesday October 08, 2014 @01:32PM (#48094021) Homepage
      Also, put the payment in an escrow account and let them know that's where the payment going. Once they fix the bug, they get the money.
    • In rare cases, you can still pay people for a subscription you don't use and use an alternative instead. e.g. Use an open source piece of software. The only small hitch is that usually executives mandate something be used if they pay for it. Which is why these cases are rare.

      • by unrtst ( 777550 )

        Have to read into the summary since there are few actual details, but this was basically my interpretation as well... that this was a poorly made purchase that the execs are now forcing their employees to use simply because they are paying for it. It makes zero sense to me if and when an open source and/or free and/or developed in house product is available that performs better. I've lost track of how many times I've seen this happen, and it's beyond frustrating every time.

        My advice (which seems to be all t

    • Just stop paying the subscription and inform to them upfront that you consider them to have terminated the contract through their own negligence. Go elsewhere.

      DO NOT do that without talking to your lawyer first.

  • Make things uncomfortable for them publicly, and who knows, maybe you'll encounter a few other of their customers who are having similar experiences that will help pile on to get a solution fast-tracked.
    • by Hadlock ( 143607 )

      There's an unofficial yahoo email group for our enterprise software owned by a top NYSE-listed company, we get almost no help from their customer service but when you bring up bugs in the email group (which broadcasts to almost all of their customers) they tend to get fixed very quickly by their development staff.

      • If it's anything like many such big companies the customer service team couldn't tell the difference between a bug and user error to save their lives. The're probably also under pressure to admit no bugs - which is easy, because the software is bug-free until the instant a new release is made, anyway.

        I wouldn't be surprised if the dev team used the mailing list to bypass the customer service people as well. That way they can actually find out about problems from customers without having to interpret reports

  • by Trailer Trash ( 60756 ) on Wednesday October 08, 2014 @01:31PM (#48093999) Homepage

    It's been more than two years (on a three-year subscription that I can't terminate early)

    So, you're worried about upholding your end of the contract even though the other side isn't upholding there end? Or did I miss something?

    • So, you're worried about upholding your end of the contract even though the other side isn't upholding there end?

      Like EULAs, the sales contract put forth by most large corporations starts with that as a starting point.

      And you need to have enough clout, and a good legal team to actually end up signing a contract which protects your interests.

      We once had a vendor come to us and say we needed to pay the same licensing fee for our development environments as for our production.

      It was only when we showed them t

      • Sometimes legal stuff looks like programming and we get confused by it, thinking that we need to take all of it literally. The issue here is that the "processor" for a legal document is a judge - a human. If you go before a judge and say "this doesn't work" and you can prove it then the contract isn't going to matter too much. If they have a bunch of lawyers all the better - it'll just cost them more to lose.

        If you're using a product outside the intended scope or whatever that's a different story, of cou

  • by enjar ( 249223 ) on Wednesday October 08, 2014 @01:37PM (#48094101) Homepage

    Proper escalation goes something like this:

    0: Make sure you aren't doing something that's going to get you sued / fired. Meaning if this is already on your plate, I hope your manager knows about it. Tell them that you are going to be talking to legal/purchasing first about stopping the bills being paid. AKA "never make a threat you can't carry out".
    1: Call your sales rep. Tell them that you find their product unacceptable, and you are withholding payment on the contract until such time as you are provided a list of fix dates, workarounds, etc for the product. Be sure to provide a list of the bugs as you understand them, listed in priority order. Be reasonable -- if you have ten bugs and items 1 and 2 are causing the most grief, it might be reasonable to accept immediate fixes for those, but the other ones my need to wait longer, or you can agree that they can be closed.
    2: Start lining up a bake-off of similar devices now, to prep when the contract runs out, and start testing them with the people who found all the bugs in the other one. If the original vendor is unresponsive, switch off their device early. It may look like crap from the financial side, but depending on who and what is riding on this bit of equipment, better reliability / less bugginess / etc may have an immediate ROI and it might be worth it.

    Other tips:

    Never curse, lose your temper or be less than professional. Save that for when you get off the phone.

    Schedule an in-person meeting if possible. Barring in-person, phone. Emails don't convey urgency well.

    If the sales rep doesn't give you satisfaction, call their boss, then keep on working the way up to the top. Top managers do not like it when their lower level managers aren't doing their jobs. They want to concentrate on long term, not stuff like this. Make them irritated enough and you will have the management chain ensuring you go away because you make them look bad -- but this is the flip side of the "being professional" bit -- if you keep using words like "unacceptable", "does not meet advertised uptime numbers", "does not match your published specifications", "crashes when XXYY happens", you stay on issue. If you go off issue into raving lunatic, cursing land, you lose your credibility and are dismissed as "angry customer", not "that guy who has a legit list of 10 major bugs and who has his lawyer and finance department witholding payment".

    • by TopherC ( 412335 )

      I like this advice, but in the case at hand -- it's been two years! -- I doubt it's worth wasting any more time trying to get your issues resolved by that vendor. You'll have to eat some costs one way or another.

      This is probably a textbook case for promoting free software. That has to be said. And since you'll need a replacement VPN solution, it's not just a pedantic argument.

      • by enjar ( 249223 )

        Indeed, I'd have done the above much earlier, and/or moved off the vendor and thrown out the junk as a sunk cost long ago. Employee productivity, time to market, seemingly unrelated problems that come down to faulty equipment can all add up quickly and dwarf the remaining cost of the service contract.

        If it's been two years, I'm wondering how severe the problems really are and how truly aggressive OP has been at finding a solution -- any solution. When we have stuff that's not working reliably and significan

      • by enjar ( 249223 )

        Oh, and to answer the "free software" point ... of course ... this is slashdot after all :) Generally when we have bakeoffs with products, we endeavor to include a "free" alternative in the mix. Sometimes they work out, sometimes they don't.

  • During install and setup, I noted a couple inconsistencies; and contacted support. They indicated that I did not need to worry about it (the problems). The device is designed to handle more than one incoming high-speed internet line.. and to load balance and fail over should one (internet line) stop working. My primary (Comcast) failed; and the united did not 'fail over' as advertised (Also the problems from long ago now were obvious: The unit failed, and the 'fail over option' never did work as advert
  • by gstoddart ( 321705 ) on Wednesday October 08, 2014 @01:44PM (#48094185) Homepage

    Company sells product. Check.

    Product has issues. Check.

    Company is unresponsive to problems. Check.

    Company has you locked into support contract. Check.

    Bummer, dude. But what you're describing is pretty much what any of us in the software industry have been seeing for a long time -- the salesman is always lying to you.

    Out of curiosity, did you do your own extensive testing and have your legal department put penalty/early termination clauses in? Or, have you become victim to believing what the sales guy told you?

    I'm betting half the people on Slashdot have worked at companies where the sales people sold impossible things which don't exist as sold. And the other half has worked for companies which have bought stuff which didn't live up to what the sales guy said.

    I'm afraid I have little practical advice for this specific question, but I've seen more than enough examples of the sales guys really stretching the truth about what is real .. to the extent of being quite certain they took the buzzwords from several separate products, turned them into one list, and then claimed they were selling you something which checked all the boxes -- even if there was no way to connect the pieces.

    And I've had numerous friends who have been tasked with building something the sales guys sold, only to discover there is no documentation, no resources to turn to, nobody has ever actually done it this way, and there's one guy who costs $4k/day who can be hired to come in and set it up ... if anybody can find him, and assuming he doesn't look at what the sales guys sold and say "wow, I don't think it does that".

    So, the moral of the story is ... hang the salesman out the window until he can provide a working system, and make damned sure your legal department is building in clauses which protect you when you realize that you've been hoodwinked.

    I've had more than a few vendors after the sale admit that, no, it doesn't really do that, but for our ridiculous consulting fee we can build something which might almost do that.

  • This is America! Be a good patriot/consumer and STFU! Corporation Banks and hedge funds are your betters and should be deferred to in all circumstances.

  • Simple: file a Bugzilla report on them: that will definitely get the word out!
  • Most vendor contracts in my experience have long, obtuse and legally dense clauses in them that seek to prevent customers from discussing publicly issues with the product, and setting maximum compensatory relief for lost business and costs as the initial purchase cost of the solution.
    However, many of those clauses are also not enforceable under the specific state/federal (or in the case of Europe, EU) laws. The only real way to know what you recourse is within the terms of the contract is to get advice from

  • by toby ( 759 ) on Wednesday October 08, 2014 @02:11PM (#48094553) Homepage Journal
    ...Is a major reason the GPL and free software / open source movements exist. Remember proprietary Unix and its tool support in the 1980s?
  • by CaptainDork ( 3678879 ) on Wednesday October 08, 2014 @02:14PM (#48094605)

    ... You're a guru, right?

    Someone in that company gives a shit, you just have to find them.

    Do some homework and start climbing up the ladder using the telephone. No emails for now.

    When you hit on someone who's going to help, THEN send up a followup email. Copy your management if applicable.

    "I enjoyed our telcon this date, Joe, and I am looking forward to the assistance you have offered in resolving this issue, including your promise t (blah blah).

    As we discussed, I can expect resolution by (date) and I will followup by phone (post phone number).

    We both want what's best for our firms and your help is greatly appreciated."

    If that bastard falls down, climb higher.

    Lather, rinse, repeat.

  • Vote with your boots. Either kick ass or walk away or both. If you can sue, do so. Find out what your legal remedies are per the contract you signed. I presume that's why there was a contract rather than a handshake. Make it clear to your sales rep that you will not be renewing your contract unless the issue is resolved in a specific amount of time. Business isn't for friendships, and sometimes you have to burn some bridges.

  • by fuqqer ( 545069 ) on Wednesday October 08, 2014 @02:29PM (#48094835) Homepage
    According to OPs slashdot profile, his personal website is: http://www.moofo.com/ [moofo.com] He has a posting on there about purchasing a watchguard in 2012, their buggy SSL client, and the ineptitude of Watchguard support. http://www.moofo.com/2014/07/1... [moofo.com]
    • by swb ( 14022 )

      That was my guess just based on my experience. Their IPSec client was from a third party and it sucked and then they switched to another third party client.

      The SSL vpn client seems to be less problematic but I've seen some people insist on using PPTP just to avoid dealing with any WG client.

      • by datapharmer ( 1099455 ) on Wednesday October 08, 2014 @04:40PM (#48096661) Homepage

        I was thinking the same thing, but I'm not afraid to name names. I have reported bug after bug and all they ever did was use the bug report as a "support case" and count it against my support allotment then close the case with no resolution. Some issues have been solved after a year or more, but support is unresponsive at best. I can name quite a few known problems, some of which could be potentially exploited for buffer overflows or denial of service attacks.

        Just to name a few problems and bugs:
        -ssl-vpn prompts the user to upgrade when new software is loaded on the firewall but if a user clicks no it disconnects them. If they click yes it uninstalls the software and fails to rienstall due to permission issues with the teefer driver if the user does not have administrative rights. It cannot be upgraded easily through group policy or windows update local publishing. It is an exe container so group policy is out and publising via local update publisher causes the system to hang at shutdown due to problems related to the driver removal/installation.

        -services that use certificate checking fail if dpi is enabled and there is no reasonable workaround (examples: webex, apple itunes and app store). Implementing a realtime host lookup would easily resolve this problem but they only offer a one time hostname lookup which adds the ip to the policy (problematic for just about everything.... yes let's unblock all of akamai, that makes sense!!!)

        -sso manager has a memory leak uses huge amounts of resources and eventually stops updating the list of authenticated users until the service is restarted if you have more than 2 domain controllers. We had to schedule a restart of the service every morning to mitigate this and it still uses an insane amount of processor time.

        -Version 11.9.1 broke multi-wan pptp so not only is ssl-vpn broken (don't get me started on their poor ipsec support) but now the less secure backup option won't connect...

        -expiring or rejecting a ca certificate causes all sites reliant on that certificate to fail to load even if a new certificate is present if dpi is enabled

        -email quarantine generates a certificate with the server's ip as the name but links send the user to the hostname thus causing a certificate warning

        -a wan connection with a ping monitor will not resume functioning once ping is restored in a multi-wan overflow configuration causing a temporary loss of connectivity to become a permanent one.

        -ssl-vpn will not connect over udp in a multi-wan environment

        I could go on... but I'll end with a non-bug:
        -They clearly run modified versions of open source software but fail to release their code changes to customers or distribute the gpl with their software. This is clear simply from the log files and debugging information and has been complained about as far back as 2005: http://lists.gpl-violations.or... [gpl-violations.org]

  • For VPN it's just the same. I've been dealing with Cisco AnyCrap VPN for the last 4 months and our problem - establishing a network-transparent VPN access to a remote share to deploy software without Cisco Malware (TM) hijacking our netconfig - still hasn't gone away. Naturally. The fuss is mostly politics (90%) with 3 parties and 15 individuals involved pushing responsibility around and fussing with bullshit that would be fixed in 30 minutes if they'd actually deliver what we need, but I guess that's the usual problem.

    Moral to the story, once again, as has been for the past 2 decades:
    Never, ever go with proprietary solutions and vendor/service lock-in for mission critical stuff!

    That aside, how does your contract look? Is it Lawyer-time yet? Perhaps you should start playing 'legal-ball' or at least start writing snail-mail solicited letters as to indicate that you're pissed and won't take this much longer. Can actually work wonders.

    Good luck. And don't forget to add "OpenVPN Compatible" into your next contracts.

  • Welcome to the new world.

    I am aparently one of the increasingly few Software Engineers that does acutally believe in the overall business benefits of only releasing well-engineered software and not treating your customers like Alpha testers,

    As such I am becoming more and more disillusioned about my chances of ever working for a company where all the managers are not just always looking for (and rewarding) ways to push some barely functional piece of badly engineered shit out the door as soon as possible, an

  • If you think your security appliance is bad, wait till the management hears about the tech support appliance used by your IT. It seems to consist of posting a vague statement to Slashdot and hoping to get a solution. It is not how IT is done, buddy.
  • by BringsApples ( 3418089 ) on Wednesday October 08, 2014 @02:54PM (#48095245)

    Dealing With an Unresponsive Manufacturer Who Doesn't Fix Bugs?

    Dunno, it's a good question. But I'm sure that someone at slashdot can answer it with the same reasoning that they' use to still be apparently trying to roll out the beta design, despite the fact that some of it's own users (customers???) have in their sig, "FUCK BETA".

    • by PJ6 ( 1151747 )

      Dealing With an Unresponsive Manufacturer Who Doesn't Fix Bugs?

      Dunno, it's a good question. But I'm sure that someone at slashdot can answer it with the same reasoning that they' use to still be apparently trying to roll out the beta design, despite the fact that some of it's own users (customers???) have in their sig, "FUCK BETA".

      The users are the product, not the customer.

  • You may have some legal recourse in this. You've paid for a specific service in subscription form and the vendor is not living up to its obligations. I would consult the company's legal department.
  • Socialize the bug. The bigger the audience, the better. I suspect that this is especially important with security issues. Argue that of the three legs of security, the bug violates "availability" if the users can't use the service. Also remind the vendor that even if you can't get out of the contract, you have to provide the service, so you will be forced to seek a different solution.

    Back when Usenet was still a thang, I was the primary sysadmin for an SGI shop. Some version of SGI had upgraded NFS to

  • Seriously. Two years into a three year contract and they haven't provided what is advertised within a reasonable effort?

    It's only been just under a year for the company I just got hired on, I found the website isn't working as advertised, and was never meant to (hard-coded HTML as placeholders, unable to accept AJAX input from my auction plugin despite them saying they could do it) and we're already lawyering up.

    We've already been hit with tens of thousands of dollars in losses because of the site - you bet

  • Sorry, but this is your fault. They'll cover what's in your service contract.
    In there you should have very specifically, what is considered reasonable performance. What is a bug. What is not. And how long they have to remedy that. If you don't, that's your own damned fault. If it is in there, and they aren't living up to it, then your lawyers should be talking to theirs about a financial remedy which should also be spelled out in the contract.

  • I deal a lot with clients who have compliance requirements such as PCI. This sort of thing is an endless source of grief, where the, "it doesn't matter, it's just an appliance" phrase comes up all the time. You have devices put into PCI-scoped network zones to do a job, but which are either using a dusty version of a commodity OS under the hood, or don't support a bunch of requirements like account controls such as password complexity and account lockouts.
    Being big-name security appliance and networking com

  • Comment removed based on user account deletion
  • "We have a deliverable! Congratulations, you're fired!"
  • If so, that's who you should be talking to about this. As soon as you even mention involving a lawyer this kind of crap tends to get fixed very quickly.
  • If your business needs a working VPN and your current supplier isn't capable of providing one you must to cut your losses and procure a new solution. And this time get someone who knows what they are doing to run the procurement process. Once you have the working alternative in place let your lawyers try to recover costs if you must. But my experience, which is that the behaviour you are experiencing is what happens shortly before the supplier goes bust. Namgge

"Protozoa are small, and bacteria are small, but viruses are smaller than the both put together."

Working...