Notice Date: Septemeber 15, 2011

For the past two weeks, eSS has experienced stability issues on three separate dates. This is very uncommon and we have been working with the manufacture of eSS hardware & software to isolate the cause of the issue.

We have scheduled an emergency one hour maintenance window on Saturday September 17, 2011 from 20:00 to 21:00 EST (GMT - 4:00).

During this window, we will be performing software updates on BEZA eMail Security Services (eSS) to address a vulnerability in Apache HTTP server. The software updates will result in a brief interruption to eSS services and should last approximately 60 minutes.

All e-mail services will continue to operate fully during this maintenance window via BEZA Backup E-mail services.

===========================================

Service Impact:

BEZA eMail Security Services (eSS) will be unavailable during this maintenance window. E-mail services will continue to operate uninterrupted via BEZA Backup E-mail services.

Software Update Information:

eSS manufacture restricts access to the inner workings of eSS to protect their intellectual property. So we have been waiting for their engineers to release an update to fix this issue. It appears the issue is related to a newly discovered vulnerability in Apache HTTP server. This vulnerability allows attackers to cause a denial of service (memory and CPU consumption) attack as exploited in the wild since the end of August 2011. eSS runs Apache HTTP server for it's web management interface.

This exploit was publicly announced on August 29, 2011 and on September 02, 2011, we implemented perimeter countermeasures to protect all web servers which serve customers web sites. Unfortunately, eSS was not protected because it's managed by it's manufacture and is under a different security policy then the rest of BEZA WEB Clusters.

Impact To Customers:

• eSS management portal will be unavailable.
• eSS e-mail scanning will be unavailable.
• All e-mail processing will be handled by BEZA Backup Mail services.
  

===========================================

We apologize for any inconvenience this may emergency maintenance may cause. As always, we have scheduled this maintenance during off-peak hours to decrease the impact on all customers. Please feel free to contact us if you have any questions or concerns.

Thank you for your continued support of BEZA.