Slashdot Mirror


Ask Slashdot: Dealing With an Unresponsive Manufacturer Who Doesn't Fix Bugs?

moofo writes: I've had huge problems with a security appliance since its installation. Specifically, the VPN SSL client is causing a problem for the majority of my remote clients. The company acknowledged the bug, but they are jerking me around, and no resolution is in sight. I tried third-party clients, but I'm wary of using them since they are not distributed by the manufacturer, and they require some maintenance to keep working properly.

I also talked to various executives at the company and besides giving me apologies, nothing good is coming my way. It's been more than two years (on a three-year subscription that I can't terminate early), and this is continually causing me trouble and aggravation. It also makes my internal customers unhappy. How do you deal with a manufacturer who doesn't fix bugs in a reasonable time frame?

42 of 204 comments (clear)

  1. The name by Anonymous Coward · · Score: 5, Interesting

    One way is to give the public the name!

    1. Re:The name by ShanghaiBill · · Score: 3, Informative

      One way is to give the public the name!

      This is a VERY good suggestion. Why is the company not being named? If the company sees their name being publicly dragged through the mud, they are likely to make customer service a higher priority. Public reviews and customer-to-customer communication facilitated by Amazon, eBay, etc. have done wonders for customer service.

    2. Re:The name by Anonymous Coward · · Score: 2, Insightful

      Problem is that a lot of vendors will immediately turn around and sue for libel/slander, as in the case of places that got one star reviews on websites, and part of the injunctive relief asked is to retract all statements, true or no.

      Of course, here in the US, the truth is a defense... but realistically, legal cases tend to be won by who has the deeper pockets.

      So, not naming a vendor right off is a wise thing. They can easily retaliate (such as the business who got someone terminated) in other ways.

    3. Re:The name by Jawnn · · Score: 3, Interesting

      I was thinking the same thing. At least give us a hint. Something like, "A major security appliance vendor, who was recently acquired by major tech company which is based in Austin..."
      Full disclosure: we own some of those and have several very similar issues with their support offerings, so the OP's complaint definitely resonates.

    4. Re:The name by ShanghaiBill · · Score: 4, Insightful

      Problem is that a lot of vendors will immediately turn around and sue for libel/slander

      In America, the truth is an absolute defense against libel/slander. As long as you have documented your accusations, you have little to worry about. Anyway, good luck serving "moofo" with a subpoena.

    5. Re:The name by mrchaotica · · Score: 2

      As long as you have documented your accusations, you have little to worry about.

      Well, other than being bankrupted before the judge is ready to rule on the issue...

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    6. Re:The name by seebs · · Score: 4, Insightful

      I am impressed, I thought I had seen some bad legal advice before, but this is spectacular.

      I am sure the vexatious litigants of the world greatly appreciate your suggestion that their victims lose on technicalities because they didn't correctly understand the legal process.

      --
      My blog: http://www.seebs.net/log/ --- My iPhone/iPad app: http://www.seebs.net/seebsfrac/
    7. Re:The name by tibit · · Score: 2

      I'd have hoped that most "appliances" are just silly to make and use these days, what with virtualization etc. You should be buying a vm image, not a piece of hardware.

      --
      A successful API design takes a mixture of software design and pedagogy.
    8. Re:The name by NormalVisual · · Score: 2

      You should be buying a vm image, not a piece of hardware.

      Unless you're trying to do something like put an IPMI port behind a firewall. A VM running on the machine to be protected won't be of much use there.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
  2. Start by posting their name by MobyDisk · · Score: 2

    If you have a legitimate beef with the manufacturer, why hide their name? You might find others with the same problem.

  3. Have you thought about publicly shaming them? by doug · · Score: 2

    Why not just bad mouth them. If they get a reputation for poor service, then so be it. This shouldn't be anyone's first approach, but if you've tried for over a year and they're not living up to your expectations, then they squandered more than one chance to do better.

  4. Your bed, lie in it. by nyet · · Score: 3, Insightful

    You chose your vendor poorly. Hope you learned from it. Next time choose a standards based VPN solution that works across many different platforms and clients.

    1. Re:Your bed, lie in it. by geekoid · · Score: 2

      Why is victim blaming getting worse? THEY aren't living up t the contract. SO it's not HIS bed.
      He should sue for non-compliance.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:Your bed, lie in it. by fuzzyfuzzyfungus · · Score: 3, Insightful

      Unless he got a fairly amazing contract, 'sucky and frustrating but more or less functional' will meet or exceed anything they actually made a legally binding promise to deliver.

      It's not as though he had a very good shot at getting a better contract(better product, possibly; but even that vendor wouldn't actually promise any more), so I wouldn't be inclined to blame him; but it'd take some seriously impressive suck to actually give him any legal ground to work with.

  5. Simple. by Dzimas · · Score: 5, Insightful

    If your company is large enough, have a quick chat with your legal department. A 3 year support contract that isn't providing you with any value is something that's worth addressing. A brief letter from your legal counsel ought to result in an interesting response (whether or not it results in action is another thing entirely).

    1. Re:Simple. by BarbaraHudson · · Score: 2
      The Better Business Bureau is pretty useless, and trying to get them banned from doing business will be impossible, and doesn't help the OP (original poster). A legal notice with demands for a refund and termination of the contract for failure to perform is the way to go. Anything else is a waste of time.

      Now, if that fails, go through with the legal mumbo-jumbo, and you can then name the company (lawsuits are public records).

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
    2. Re:Simple. by tibit · · Score: 2

      BBB is a scam. It's a private corporation that pretends to be something more. They are beyond useless.

      --
      A successful API design takes a mixture of software design and pedagogy.
    3. Re:Simple. by NormalVisual · · Score: 2

      While I generally agree with your assessment of the BBB, lots of other people don't understand that it's just a scheme to make money, and take what it says as gospel. Given that, lots of companies will still work to keep their BBB rating positive, and thus it can still be a (foam rubber) hammer to use against a company that's not living up to its word.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
  6. Re:Three year s ubscription... by Richard_at_work · · Score: 5, Insightful

    And if it doesn't, why the hell didn't someone flag that up before signing on for 3 years of payments with no legal recourse? The problem isn't really the vendor here, its the dumb ass that signed the contract which allows the vendor to get away with shit like this.

    Pull the contract, when they threaten to sue for breach then you threaten to counter sue for non-performance and non-compliance as the product isn't fit for use.

  7. I'm not sure this is the right way... by damn_registrars · · Score: 4, Funny

    If you're trying to get slashdot to finally deal with some of their old bugs, I'm not sure that shaming them on their own front page is the way to do it. Granted, the exodus of users hasn't done it, either...

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  8. You have several approaches by mi · · Score: 2

    How do you deal with a manufacturer who doesn't fix bugs in a reasonable time frame?

    Here are your choices:

    1. Complain to BBB or outright sue them.
    2. Lobby your elected officials to pressure existing regulatory authorities to withdraw their certification. If no such certification is currently required, the bureaucrats will be happy to introduce it for you (and for themselves).
    3. Throw out their equipment and buy from a competitor

    I tend to prefer the third option, although I've registered my displeasure on BBB on a few occasions too.

    It's been more than two years (on a three-year subscription that I can't terminate early)

    You may not be able to stop paying for the contract (be sure your next one is better worded, though), but you can stop using the service — as soon as you find a replacement...

    --
    In Soviet Washington the swamp drains you.
  9. Stop paying. by Nick_Lowe712 · · Score: 4, Interesting

    Just stop paying the subscription and inform to them upfront that you consider them to have terminated the contract through their own negligence. Go elsewhere.

    1. Re:Stop paying. by AltGrendel · · Score: 4, Insightful

      Also, put the payment in an escrow account and let them know that's where the payment going. Once they fix the bug, they get the money.

      --
      The simple truth is that interstellar distances will not fit into the human imagination

      - Douglas Adams

  10. Let me get this straight by Trailer+Trash · · Score: 2

    It's been more than two years (on a three-year subscription that I can't terminate early)

    So, you're worried about upholding your end of the contract even though the other side isn't upholding there end? Or did I miss something?

  11. Stop paying until the bugs are fixed by enjar · · Score: 5, Insightful

    Proper escalation goes something like this:

    0: Make sure you aren't doing something that's going to get you sued / fired. Meaning if this is already on your plate, I hope your manager knows about it. Tell them that you are going to be talking to legal/purchasing first about stopping the bills being paid. AKA "never make a threat you can't carry out".
    1: Call your sales rep. Tell them that you find their product unacceptable, and you are withholding payment on the contract until such time as you are provided a list of fix dates, workarounds, etc for the product. Be sure to provide a list of the bugs as you understand them, listed in priority order. Be reasonable -- if you have ten bugs and items 1 and 2 are causing the most grief, it might be reasonable to accept immediate fixes for those, but the other ones my need to wait longer, or you can agree that they can be closed.
    2: Start lining up a bake-off of similar devices now, to prep when the contract runs out, and start testing them with the people who found all the bugs in the other one. If the original vendor is unresponsive, switch off their device early. It may look like crap from the financial side, but depending on who and what is riding on this bit of equipment, better reliability / less bugginess / etc may have an immediate ROI and it might be worth it.

    Other tips:

    Never curse, lose your temper or be less than professional. Save that for when you get off the phone.

    Schedule an in-person meeting if possible. Barring in-person, phone. Emails don't convey urgency well.

    If the sales rep doesn't give you satisfaction, call their boss, then keep on working the way up to the top. Top managers do not like it when their lower level managers aren't doing their jobs. They want to concentrate on long term, not stuff like this. Make them irritated enough and you will have the management chain ensuring you go away because you make them look bad -- but this is the flip side of the "being professional" bit -- if you keep using words like "unacceptable", "does not meet advertised uptime numbers", "does not match your published specifications", "crashes when XXYY happens", you stay on issue. If you go off issue into raving lunatic, cursing land, you lose your credibility and are dismissed as "angry customer", not "that guy who has a legit list of 10 major bugs and who has his lawyer and finance department witholding payment".

    1. Re:Stop paying until the bugs are fixed by TopherC · · Score: 2

      I like this advice, but in the case at hand -- it's been two years! -- I doubt it's worth wasting any more time trying to get your issues resolved by that vendor. You'll have to eat some costs one way or another.

      This is probably a textbook case for promoting free software. That has to be said. And since you'll need a replacement VPN solution, it's not just a pedantic argument.

  12. Hmmm ... by gstoddart · · Score: 2

    Company sells product. Check.

    Product has issues. Check.

    Company is unresponsive to problems. Check.

    Company has you locked into support contract. Check.

    Bummer, dude. But what you're describing is pretty much what any of us in the software industry have been seeing for a long time -- the salesman is always lying to you.

    Out of curiosity, did you do your own extensive testing and have your legal department put penalty/early termination clauses in? Or, have you become victim to believing what the sales guy told you?

    I'm betting half the people on Slashdot have worked at companies where the sales people sold impossible things which don't exist as sold. And the other half has worked for companies which have bought stuff which didn't live up to what the sales guy said.

    I'm afraid I have little practical advice for this specific question, but I've seen more than enough examples of the sales guys really stretching the truth about what is real .. to the extent of being quite certain they took the buzzwords from several separate products, turned them into one list, and then claimed they were selling you something which checked all the boxes -- even if there was no way to connect the pieces.

    And I've had numerous friends who have been tasked with building something the sales guys sold, only to discover there is no documentation, no resources to turn to, nobody has ever actually done it this way, and there's one guy who costs $4k/day who can be hired to come in and set it up ... if anybody can find him, and assuming he doesn't look at what the sales guys sold and say "wow, I don't think it does that".

    So, the moral of the story is ... hang the salesman out the window until he can provide a working system, and make damned sure your legal department is building in clauses which protect you when you realize that you've been hoodwinked.

    I've had more than a few vendors after the sale admit that, no, it doesn't really do that, but for our ridiculous consulting fee we can build something which might almost do that.

    --
    Lost at C:>. Found at C.
  13. Re:Bad publicity. by Hadlock · · Score: 2

    There's an unofficial yahoo email group for our enterprise software owned by a top NYSE-listed company, we get almost no help from their customer service but when you bring up bugs in the email group (which broadcasts to almost all of their customers) they tend to get fixed very quickly by their development staff.

    --
    moox. for a new generation.
  14. Everyone chooses how to spend the costs business by Kludge · · Score: 2

    If he had chosen a standards compliant open-source VPN solution, then he would not have to sue. He could hire programmers to fix the problem himself, rather than hiring lawyers to sue the company and hope that someday two years from now the problem is resolved.

  15. Your bed, lie in it. by Ukab+the+Great · · Score: 2

    While I agree with gist of your sentiment, you're making the assumption that the submitter was able to make the choice of vendor. Not all of us get to choose which technologies we're required to support. Maybe a pointy-haired boss told the guy to go with the vendor because his buddy, the vendor's CEO, let's him win at golf.

  16. Intransigent vendors by toby · · Score: 2

    ...Is a major reason the GPL and free software / open source movements exist. Remember proprietary Unix and its tool support in the 1980s?

    --
    you had me at #!
  17. Let me fix that for you ... by CaptainDork · · Score: 2

    ... You're a guru, right?

    Someone in that company gives a shit, you just have to find them.

    Do some homework and start climbing up the ladder using the telephone. No emails for now.

    When you hit on someone who's going to help, THEN send up a followup email. Copy your management if applicable.

    "I enjoyed our telcon this date, Joe, and I am looking forward to the assistance you have offered in resolving this issue, including your promise t (blah blah).

    As we discussed, I can expect resolution by (date) and I will followup by phone (post phone number).

    We both want what's best for our firms and your help is greatly appreciated."

    If that bastard falls down, climb higher.

    Lather, rinse, repeat.

    --
    It little behooves the best of us to comment on the rest of us.
  18. Future relationship?!? by tlambert · · Score: 2

    Because he might want to have a decent relationship with them? Other then this issue, it might be a great product, might be getting a discount and so on.

    Future relationship?!?

    So they can buy *more* products with bugs an unresponsive support in the future? I can see why you'd want to protect *that* relationship...

  19. The vendor seems to be Watchguard by fuqqer · · Score: 4, Informative

    According to OPs slashdot profile, his personal website is: http://www.moofo.com/ He has a posting on there about purchasing a watchguard in 2012, their buggy SSL client, and the ineptitude of Watchguard support. http://www.moofo.com/2014/07/1...

    1. Re:The vendor seems to be Watchguard by swb · · Score: 2

      That was my guess just based on my experience. Their IPSec client was from a third party and it sucked and then they switched to another third party client.

      The SSL vpn client seems to be less problematic but I've seen some people insist on using PPTP just to avoid dealing with any WG client.

    2. Re:The vendor seems to be Watchguard by datapharmer · · Score: 3, Informative

      I was thinking the same thing, but I'm not afraid to name names. I have reported bug after bug and all they ever did was use the bug report as a "support case" and count it against my support allotment then close the case with no resolution. Some issues have been solved after a year or more, but support is unresponsive at best. I can name quite a few known problems, some of which could be potentially exploited for buffer overflows or denial of service attacks.

      Just to name a few problems and bugs:
      -ssl-vpn prompts the user to upgrade when new software is loaded on the firewall but if a user clicks no it disconnects them. If they click yes it uninstalls the software and fails to rienstall due to permission issues with the teefer driver if the user does not have administrative rights. It cannot be upgraded easily through group policy or windows update local publishing. It is an exe container so group policy is out and publising via local update publisher causes the system to hang at shutdown due to problems related to the driver removal/installation.

      -services that use certificate checking fail if dpi is enabled and there is no reasonable workaround (examples: webex, apple itunes and app store). Implementing a realtime host lookup would easily resolve this problem but they only offer a one time hostname lookup which adds the ip to the policy (problematic for just about everything.... yes let's unblock all of akamai, that makes sense!!!)

      -sso manager has a memory leak uses huge amounts of resources and eventually stops updating the list of authenticated users until the service is restarted if you have more than 2 domain controllers. We had to schedule a restart of the service every morning to mitigate this and it still uses an insane amount of processor time.

      -Version 11.9.1 broke multi-wan pptp so not only is ssl-vpn broken (don't get me started on their poor ipsec support) but now the less secure backup option won't connect...

      -expiring or rejecting a ca certificate causes all sites reliant on that certificate to fail to load even if a new certificate is present if dpi is enabled

      -email quarantine generates a certificate with the server's ip as the name but links send the user to the hostname thus causing a certificate warning

      -a wan connection with a ping monitor will not resume functioning once ping is restored in a multi-wan overflow configuration causing a temporary loss of connectivity to become a permanent one.

      -ssl-vpn will not connect over udp in a multi-wan environment

      I could go on... but I'll end with a non-bug:
      -They clearly run modified versions of open source software but fail to release their code changes to customers or distribute the gpl with their software. This is clear simply from the log files and debugging information and has been complained about as far back as 2005: http://lists.gpl-violations.or...

      --
      Get a web developer
  20. Proprietary Vendor Lock-In always sucks. Contract? by Qbertino · · Score: 2

    For VPN it's just the same. I've been dealing with Cisco AnyCrap VPN for the last 4 months and our problem - establishing a network-transparent VPN access to a remote share to deploy software without Cisco Malware (TM) hijacking our netconfig - still hasn't gone away. Naturally. The fuss is mostly politics (90%) with 3 parties and 15 individuals involved pushing responsibility around and fussing with bullshit that would be fixed in 30 minutes if they'd actually deliver what we need, but I guess that's the usual problem.

    Moral to the story, once again, as has been for the past 2 decades:
    Never, ever go with proprietary solutions and vendor/service lock-in for mission critical stuff!

    That aside, how does your contract look? Is it Lawyer-time yet? Perhaps you should start playing 'legal-ball' or at least start writing snail-mail solicited letters as to indicate that you're pissed and won't take this much longer. Can actually work wonders.

    Good luck. And don't forget to add "OpenVPN Compatible" into your next contracts.

    --
    We suffer more in our imagination than in reality. - Seneca
  21. Going out of business being right by sjbe · · Score: 2

    In America, the truth is an absolute defense against libel/slander. As long as you have documented your accusations, you have little to worry about.

    Except for perhaps going bankrupt defending yourself. Being right isn't worth much if you get put out of business proving that fact. Accusing a large company with flesh eating lawyers of anything publicly can result in a very costly lawsuit regardless of the merits of the case.

  22. Re:Three year s ubscription... by jmcharry · · Score: 4, Interesting

    I think it is normal to start with a "cure letter" telling them they are in default on the contract and giving them 30 days to come into compliance or face termination. This usually leads to something both sides can live with.

  23. A man who defends himself has a fool for a client by sjbe · · Score: 3, Informative

    In a civil lawsuit, all the filing costs are paid by the plaintiff, not the defendant.

    Filing costs maybe but not lawyers fees which always account for the bulk of the cost of any lawsuit aside from any adverse judgements. Filing costs are a rounding error.

    If you know you spoke the truth, and you have solid evidence to back that up, then you really don't need a lawyer.

    HAHAHAHAHAHA... If you believe that you are an idiot and have never been on the pointy end of an actual lawsuit. This isn't an episode of Judge Judy we are talking about here.

  24. Beta? by BringsApples · · Score: 2

    Dealing With an Unresponsive Manufacturer Who Doesn't Fix Bugs?

    Dunno, it's a good question. But I'm sure that someone at slashdot can answer it with the same reasoning that they' use to still be apparently trying to roll out the beta design, despite the fact that some of it's own users (customers???) have in their sig, "FUCK BETA".

    --
    Politics; n. : A religion whereby man is god.
  25. Re:Three year s ubscription... by St.Creed · · Score: 3, Informative

    That's exactly the right way where I live. You start with a complaint, then escalate with a letter giving them a last chance to fix the issues. You give them a reasonable term, such as 30 days. After that, you terminate the contract and ask for your money back due to breach of contract.

    You'll be much better off if you let a lawyer handle this sort of thing, by the way. But that goes for signing the contract in the first place, too.

    --
    Therefore, by the (faulty) logic you're using, you're just a cow with a keyboard - osu-neko (2604)