At this time I'm currently feeling like: just patch even if you don't have saml. 🤨

That was exactly what we did. We are pretty sure we are not affected. But customers would have stormed us with requests, so we just patched em all and gave a notice to all customers.

Same, the idea is also, say that they want SAML in two weeks (unlikely!), I don't want the first question to be what version they have and that a patch needs to be planned. This way, I know by heart what version we're running on all VPXs.

customer told me their IPS was picking up a lot of suspicious traffic, went ahead and enabled their IP Rep... oh boy.

which log do you see that in?

IP rep with a log action. Those came in fast

We do the same @Remy

Yup - sometimes insurance companies will require it for cyber insurance and so teams don't even care. Really want to get to patching not being entire firmware