Kia Ora All,
Anyone else having a fun day mitigating/assessing their exposure relating to Shellshock?

Great summary here: http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html
Tester here: https://shellshock.detectify.com/

We are luckily reasonably protected - IPS on External Firewall along with a Netscaler Responder Policy is covering our external stuff, plus we're largely a windows shop.