"Honestly the real scandal is the super premium prices they ask for this stuff given what it actually is."
if you think the purchase price is bad, just wait until it's time to renew support. That's when they break out the shoulder-length rubber glove.
It's also funny how PAN sales reps bash their competitors for vulnerabilities. You'd think by now they would realize how that blows up in their faces. ALL OF THEM have the same problem. All we can do as customers is to watch how they communicate and how quickly they address the issue. We also have to assume that a breach WILL HAPPEN, and have an incident response plan in place before it happens. The best time to ask the question "What should we do?" is before a breach happens. You should also have all sorts of "trip wires" in place like scanning, analysis and alerting tools, and perhaps some deception technologies that can alert when someone is poking around inside the network.