Aegisys Trust Center

We are aware Internet Service Provider Vendors such as Microsoft and AWS are experiencing availability difficulties iin their delivery of services affecting subscription clients M365, Dynamics and including Police Website Hosting for select Ontario Police services.

We wanted to share that Aegisys hosting of those Police websites within Aegisys are not impacted in this current outage and Aegisys Hosting and IT Services remains online and responsive.

We will continue to monitor Internet Service provider vendor services as they come back online.

Good Morning

We have seen all sub processors declare all operations are returned to normal at this time.

Your Aegisys Security Teams

Good Evening

The ongoing global AWS outage is currently affecting many online applications for most of this day including Aegisys Sub Processors and vendors.

AWS is still in the process of restoring services, and we continue to observe latency and intermittent issues associated with our subprocessors impacted by these outages. Unfortunately, these disruptions are outside of our control and we continue to monitor as services return to normal. If anyone has any questions, please do not hesitate to ask.

Your Aegisys Success teams

An Aegisys Partner, Sonicwall has announced a security incident whereby Sonicwall “ Device Firewall encrypted backups at rest” within the Sonicwall trusted cloud were accessed by a threat actor. This was not ransomware.

This incident affects the Sonicwall Backup repository used by Sonicwall Products (A Sub Processor) within Sonicwall
Trusted vendors.

Sonicwall has notified Aegisys with a list of impacted firewalls.

The MySonicwall service itself was NOT impacted. The Sonicwall Cloud Repository within a sub processor of Sonicwall was.

This is a Critical alert. This Notice does not mean your network has been exploited.

Next Steps

Aegisys is actively mitigating this incident for Aegisys AND on behalf of our clients as a priority one. As one may expect, the firewall config is a sensitive document, and we are taking this seriously.

There are steps that are needed to be taken as quickly as possible. Aegisys is doing this actively.

1. Sonicwall has provided an Aegisys Partner tool that based on serial number, will guide mediation steps for each firewall. Each firewall mitigation will be different. We are actively running this against your firewalls now.

2. There will be no disruption to your firewalls to Production. However, there will be changes that will blip connectivity to partner player integrations to your networks.

3. Sonicwall Cloud Backups are disabled on your firewalls.

4. Aegisys will be following Sonicwall directives of what requires changing to ensure security. This may include password changes, IPSEC Preshared secrets for IPSEC VPN Tunnels and a comprehensive review of all service configurations.

5. These changes are being documented in a ticket for your records for each client.

6. This was not a firmware CVE exploit.

7. This mitigation is following Aegisys SOC 2 established best practices.

The above list is not comprehensive remediation steps and is provided for information purposes only. Please refer to your ticket notes as you will see as adjustments are being made proactively.

If anyone has any questions, please do not hesitate to reach out to support@aegisys.com or an Aegisys representative contact of your choosing.

Sincerely,
Your Aegisys Security Teams