[3np]

The CTO and I agreed we value honesty and integrity in the companies we work with. On top of that, this is not behavior we want go support. If they pull BS on others, they may pull BS on us one day. It does not give good expectations for how they would handle disclosure surrounding some embarrassing security incident, for one thing.

"Business is business" may have different connotation for different people.

[unethical_ban]

Business is business. I don't like PA's behavior here either, but you aren't going to get better behavior from Cisco or others. Good luck spinning up some OpenBSD servers for your security stack, if ideological purity is a higher priority than your network's security.