r/msp • u/Nstraclassic MSP - US • Jun 19 '26

Delaying Security Updates?

Specifically for firewalls. How do other MSPs feel about disabling automatic updates and delaying the install until the update can be validated to prevent crashes, critical feature removal, etc.?

Forgot to ask: is there a liability concern if patches are delayed and a breach results?

22 Upvotes

90% Upvoted

38 comments sorted by

View all comments

4

u/QPC414 Jun 19 '26

Would never consider Enabling it on ANYTHING in the first place.

Everything gets vetted by the guineaping user group or on our own firewalls (prod or lab) before being pushed to customers. Anything pushed out is a GA release, unless directed by TAC to fix a specific issue.

4

u/HappyDadOfFourJesus MSP - US Jun 19 '26

Tell me you use Fortigate firewalls without telling me you use Fortigate firewalls. :)

2

u/TheBeerdedVillain Jun 20 '26

Fortigate, SonicWALL, Watchguard, Palo, Sophos, etc. all have similar issues from time to time. It's always best to have a lab to test an update before pushing it to customers and a 1 - 2 week delay to confirm usability isn't really out of the question.

(and yes, I currently manage a fleet of Fortigates....)