> Once they're known. Isn't that how life works? Unknown unknowns? :-) > I suppose nexus firewall let log4j pass. It should be reasonable to assume that a pr

> Once they're known. Isn't that how life works? Unknown unknowns? :-) > I suppose nexus firewall let log4j pass. It should be reasonable to assume that a product dedicated to something will, on average, do this job better/faster than a random developer, though. Since that's their job. So Nexus Firewall presumably blocks these vulnerabilities faster than the average app/system developer notices them. There's value in reducing the delta between the vulnerability exploit day and an entire ecosystem being patched/fixed.