Quantcast
Channel: All Centrify Express posts
Viewing all articles
Browse latest Browse all 1833

Re: how to get security updates ?

$
0
0

 

Hi Robertson,

 

i can state the problem again:

* your update repository is deliberately blocked for non-paying customers.

and to stipulate the problem :

* the link you mention "product security policies" is not available for non-paying customers.

also,

* the "idea exchange" link is also not accessible for non-paying customers.

 

fyi, i have used email and phone to address this problem, but as an express software user i was redirected to this public forum instead.

 

to answer your question:

No the problem is not inconvenience,

the problem is the security implications that you create for express-software customer base,

because it can only be manually reinstalled to update.

 

I am sure you can follow the line of reasoning. Could you imagine what happens if for example micosoft would only allow manual updates ?Even the (free) ms-sql-express software gets automatic updates. Its just a matter of product responsibility.

 

the text for the idea exchange is:

i think the repository access-restriction policy should reconsidered. It would improve security for your customer base significantly. Also it is easy to change a web-server configuration to lift authentication.  Another quick win to improve security could be to include this updates repository configuration in the software package.

 

regards,

Merijn

 


Viewing all articles
Browse latest Browse all 1833

Trending Articles