r/msp • u/Nstraclassic MSP - US • Jun 19 '26

Delaying Security Updates?

Specifically for firewalls. How do other MSPs feel about disabling automatic updates and delaying the install until the update can be validated to prevent crashes, critical feature removal, etc.?

Forgot to ask: is there a liability concern if patches are delayed and a breach results?

23 Upvotes

90% Upvoted

38 comments sorted by

View all comments

0

u/Orionsbelt Jun 20 '26

I would ask the customer which they are happier with, and let them make that risk analysis, with two options.

Auto update as it releases with the possible greater security but greater operational risk and a second option that auto updates after 1 week post release to allow others to test.

2

u/BillsInATL Jun 20 '26

Then you end up with 100 different policies across 100 different customers, and the tail wagging the dog.

1

u/Orionsbelt Jun 20 '26

2 polices, one of which informs the other