I know Cisco have confirmed IOS and IOS-XE are not vulnerable to Log4J but there is now an increased security concern around anything apache or http related. We have onboarded most of our network switches to DNA Center to take advantage of telemetry ...