I agree that there should be some kind of guideline on how long product support should be expected. As long as those guidelines are reasonable (90 days? 2 years

I agree that there should be some kind of guideline on how long product support should be expected. As long as those guidelines are reasonable (90 days? 2 years? 5 years?) I don't think it should be considered onerous for anyone who is selling security-conscious products like networking equipment.