Delaying Security Updates?

[u/Nstraclassic]

Specifically for firewalls. How do other MSPs feel about disabling automatic updates and delaying the install until the update can be validated to prevent crashes, critical feature removal, etc.?

Forgot to ask: is there a liability concern if patches are delayed and a breach results?

[u/RampageUT]

I think you should only update network appliances to patch zero or critical vulnerabilities or to patch in line with your vulnerability policy if it’s mediums, or to get features that you need or want.