We received the definition for IPS this morning.   It looks like there was a long delay between when the blogger said they were available and when they actually were.   Is there a customer base (e.g. large organizations) that receive IPS definitions before the rest of the public?   Just curious...

I dont think so.

The RR's (Rapid Release Def's) are posted on the LU servers and accessible to all organizations at the same time.

Unless you have a Platinum or BCS contract, suring which you get definitions in around 2-4 hours, for threats that you have manually submitted, there is no difference between the general release and so on.

Additionally, even if a Platinum / BCS contract customer submits new threat samples, and get definitions soon, the same detections are posted to the generic LU servers for all to benefit from.

HTH.