High Sec Labs Security Procedures - HighSecLabs K304 User Manual

to the Product while it is in transit. Upon completion of the repair,
High Sec Labs will return the Product to the Customer, freight
prepaid. A copy of your Warranty Certificate must accompany the
Product. All non-High Sec Labs Product, accessories, attachments,
modifications and all programs, data, and storage media must be
removed from the Product before it is mailed in for service. High
Sec Labs shall not be responsible for items that are not removed.
Carry-In Coverage
The Customer will make the initial service request to the High Sec
Labs Customer Service depending on the product covered. If High
Sec Labs determines that a repair is required, the Customer must
deliver the Product to a High Sec Labs Authorized Service Provider,
make arrangements and pay for the transport of Product to
Customer after its repair. A copy of the Customer's Warranty
Certificate must accompany the Product. All non-High Sec Labs
Product, accessories, attachments,
programs, data, and storage media must be removed from the
Product prior to taking Product to the High Sec Labs Authorized
Service Provider. High Sec Labs or High Sec Labs Authorized
Service Provider shall not be responsible for items that are not
removed or that are damaged before they are received by High
Sec Labs or the Service Provider.
Upgrade Commitment on behalf of Customer
In case High Sec Labs discovers some failure in its Software (e.g.
Firmware, Operating System, Management Software, Plug-Ins or
any other aspect of its Software), the customer might be required
to upgrade his software to a specific software version within a
reasonable period of time. After the specified time has passed,
High Sec Labs will not be held obligated to support the product
under its Warranty or Extended Warranty terms and conditions.
K304x-K308 Secure KM Switch User Manual
modifications and all
36

High Sec Labs Security Procedures

Reporting HSL Product Vulnerability
If you are aware of potential security vulnerability with any HSL
product, we encourage you to contact us immediately at the
following email address: security@highseclabs.com
support form at: http://www.highseclabs.com/support_form.html
After your communication is received, HSL personnel will contact
you to follow up. To ensure confidentiality, HSL encourages you to
use our PGP encryption key.
The security@highseclabs.com email address is not intended to
reach technical support on HSL products or services. Any support
inquiries should be directed to
support web-form indicated above.
Responsible Disclosure
Notifying a vendor prior to releasing information publicly about
vulnerability is standard practice in the security industry and is
known as "responsible disclosure." This advance notice allows
vendors to research and fix vulnerabilities before potential attackers
are notified of their existence – keeping the product install base
secure. We appreciate your assistance in ensuring that HSL products
and services are secure.
Receiving a notification about Product Vulnerability / Solution
HSL security policy and internal system provides quick response in
case that product security vulnerability is found. Once product
vulnerability is found and confirmed by HSL QA, HSL provides an
email to the following list of users based on affected product:
or fill out a
support@highseclabs.com or