Cisco Umbrella outage history

Between approximately 14:15 and 15:40 UTC, customers using the Investigate dashboard and associated data retrieval APIs may have experienced 503 errors, unavailable graphs or data, and errors when retrieving logs or graph information. The issue has been resolved, and service has returned to normal.

We are investigating a network issue causing delays when creating or updating policies in Cisco Umbrella in Johannesburg, South Africa. Customers may experience longer than expected propagation times for recent policy changes. Existing policies remain active while new or updated policy changes may be delayed. Our engineering teams are working to restore normal policy update processing. We will provide another update as soon as more information is available.

We are continuing to investigate the issue. Existing policies remain active. However, new or updated policy changes may take longer than expected to apply.

We have identified the issue and are applying mitigation. Existing policies remain active while recent policy changes may still be delayed.

Mitigation is underway, and we are seeing improvement. We will continue monitoring progress and provide another update as needed.

The network issue affecting Cisco Umbrella policy update processing in Johannesburg, South Africa has been resolved. New and updated policy changes are now applying as expected. We’re Here to Help If you have any questions or need assistance, please contact our support team.

We are investigating a potential issue with DNS service affecting customers connecting globally. Some Domains may be incorrectly categorised as DNS Tunneling VPN. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution.Updates and additional details will be provided as new information becomes available.

The team is actively monitoring the environment to validate service stability. We will provide a update once the incident has been fully resolved.

The issue affecting incorrectly categorized DNS Tunneling VPN issue for some domains has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We are currently monitoring elevated capacity utilization at the Europe (France) data center. To maintain service quality, this location has been temporarily removed from rotation for new connections. Customers with existing connections will remain connected and can continue using the service without interruption. New connection attempts will be automatically redirected to the nearest available data center configured for your organization. Customers connecting using a location-specific address may receive a certificate warning. We recommend using the automatic selection address to ensure seamless connectivity. Our engineering team will continue to monitor capacity throughout the day and will provide further updates as more information becomes available. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

The capacity condition affecting Europe (France) has been resolved. Cisco Secure Connect Remote Access client connections are operating normally. We’re Here to Help If you have any questions or need assistance, please contact our support team.

We have identified a connectivity issue affecting Cisco Secure Connect and Umbrella services in the Palo Alto data center. Customers whose traffic is routed through Palo Alto may be unable to establish new tunnels or pass traffic through existing tunnels. Cisco is actively implementing mitigation measures to restore service. We will provide further updates as more information becomes available.

We are continuing to work on a fix for this issue.

Cisco is actively working to mitigate the impact and restore traffic flow. We are continuing to investigate and will provide more information as it becomes available.

Cisco has taken the affected Palo Alto site out of rotation to mitigate impact for Cisco Secure Connect and Umbrella traffic. Customers whose traffic was routed through Palo Alto should be redirected to available sites. We are continuing to monitor traffic recovery while working with our infrastructure provider and will provide more information as it becomes available.

Recovery work is ongoing with our infrastructure provider to restore the affected connectivity path. We will share a restoration ETA as soon as one is available. We will provide further updates as more information becomes available.

We are continuing with the recovery work

The connectivity issue in the Palo Alto data center is now resolved. All services are restored and the site is back in rotation. We have confirmed that traffic flow is stable. Thank you for your patience.

We are currently investigating a connectivity issue originating from our infrastructure provider that may be affecting customers connecting through multiple data centers. Customers connecting through the following locations may experience intermittent connectivity issues or degraded traffic performance: Europe (Germany) Europe (Milan) Europe (Stockholm) India (West) India (South) Africa (South Africa) Our engineering team is actively working with our infrastructure provider to confirm the impact, identify the root cause, and implement a resolution. Updates and additional details will be provided as new information becomes available. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We are continuing to monitor connectivity for the affected sites while awaiting further updates from our infrastructure provider.

Cisco has taken the affected sites out of rotation: Frankfurt, Amsterdam, Mumbai, Chennai, Cape Town, Milan, and Stockholm. Customers attempting to connect through these sites will be automatically redirected to other available sites. Customers that only have the affected sites provisioned are encouraged to provision additional sites to maintain connectivity. We are continuing to monitor and will provide more information as it becomes available.

Amsterdam, Mumbai, Chennai, Cape Town, Milan, and Stockholm are back in rotation. No customer action is required.

We are still working with our infrastructure provider on the EU/Frankfurt site intermittent connectivity issue. Customers with reporting data stored in the EU/Frankfurt data storage location may be unable to retrieve reporting data older than 30 days at this time. We are continuing to monitor and will provide more information as it becomes available.

All services in Frankfurt and previously affected sites are now fully restored. Connectivity and reporting are back to normal. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We are currently investigating a potential network connectivity issue affecting customers connecting to the Europe (Germany) data center. Customers may have experienced intermittent service disruption, including brief connection interruptions or degraded traffic performance. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution. Updates and additional details will be provided as new information becomes available. Thank you for your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We are continuing to investigate a network connectivity issue affecting customers connecting to the Europe (Germany) data center. The specific impact for Secure Web Gateway (SWG) is delayed logging, but traffic is not impacted. Thank you for your patience and understanding.

As part of our mitigation efforts, we are redirecting traffic from the affected data center to restore normal service for impacted customers. During this activity, customers may experience a brief interruption to their session. If your connection does not restore automatically, we kindly ask that you reconnect manually using Cisco Secure Client to be routed to a healthy location. We sincerely appreciate your patience and understanding.

Traffic has been successfully redirected away from the affected data center, and all services have been stabilized as of 05:01 UTC. Customers should now experience normal service performance. If your connection has not restored automatically, we kindly ask that you reconnect manually using Cisco Secure Client to be routed to a healthy location. Reporting services may take a few hours to fully catch up. During this time, some log and report data may appear delayed. We sincerely appreciate your patience and understanding.

We are investigating an issue where Cisco Umbrella customers globally may be unable to download Cisco Secure Client from the dashboard. Existing Cisco Secure Client users and customer traffic are not impacted. Engineering is investigating, and we will provide an update as more information becomes available.

This issue has been resolved. Cisco Umbrella customers are now able to download Cisco Secure Client from the dashboard. We're Here to Help If you have any questions or need assistance, please contact our support team.

Between approximately 11:52 UTC and 12:12 UTC on August 12, 2026, customers connecting through the India (Mumbai) data center may have experienced a brief network disruption. During this period, some customers may have experienced disconnections, reduced traffic throughput, or difficulty establishing new connections. Service was restored as of 12:12 UTC, and all services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We're Here to Help If you continue to experience issues, please contact Cisco Support.

We are currently investigating an issue affecting the provisioning of new resiliency regions for the Cisco Secure Connect platform across all data centers. As a result, customers may be unable to provision new resiliency regions at this time, current connectivity should not be impacted. Our engineering team is actively working to identify the root cause and restore full functionality as quickly as possible. Updates and additional details will be provided as new information becomes available. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We have identified an issue affecting a subset of Cisco Secure Connect services and have started mitigation steps to reduce the overall impact. Affected customers may continue to experience intermittent failures with new resiliency region provisioning and some clientless access workflows. Existing established connectivity is not expected to be broadly impacted. Our engineering teams are continuing to investigate the root cause while mitigation work is in progress. Updates and additional details will be provided as new information becomes available.

This issue has been resolved. Cisco Secure Connect resiliency region provisioning has returned to normal, and customers should no longer experience issues provisioning new resiliency regions. Current connectivity was not expected to be impacted during this incident. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

Affected customers using Cisco Umbrella Cloud Delivered Firewall through Singapore may experience policy enforcement failures for new traffic or new users that require fresh user identity validation. New tunnels are expected to establish successfully. However, traffic from users behind those tunnels may be blocked if Umbrella cannot obtain the required user identity context for policy evaluation. Existing authenticated sessions and established traffic flows are not expected to be impacted unless they require new identity validation.

The issue affecting Cisco Umbrella Cloud Delivered Firewall policy enforcement in Singapore has been resolved. Services have returned to normal operation. We’re Here to Help If you have any questions or need assistance, please contact our support team.

We are investigating a third-party cloud provider network issue affecting Cisco Secure Connect services in the India region. Customers connecting through the Mumbai and Chennai locations may experience connectivity issues or service degradation for some Secure Connect services, including private access functionality. To mitigate impact, traffic is being rerouted to alternate locations where available, and affected services in Mumbai and Chennai have been taken out of rotation. Customers reconnecting should use the Any Location connect feature so traffic can be routed to an available location. Connections that continue to use the impacted Chennai or Mumbai locations may continue to fail. Our engineering teams are actively investigating and working with the provider to restore normal service. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

The underlying Direct Connect issue in the AP South region has been resolved. Cisco engineering teams are validating service stability and preparing to return the affected Mumbai and Chennai services to normal operation. Until this validation is complete, customers reconnecting should continue to use the Any Location connect feature so traffic can be routed to an available location. Updates and additional details will be provided as new information becomes available.

This issue has been resolved. Cisco Secure Connect Remote Access Client connectivity through the Mumbai and Chennai locations has been restored, and the affected services have returned to normal operation. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

We are investigating an issue affecting a subset of Cisco Secure Connect customers associated with the Frankfurt and London data centers. Affected customers may be unable to create new connections or complete new customer onboarding. Existing connected users are expected to continue using the service without disruption. The impact is limited to new connection provisioning for customers associated with the affected head ends. We are working to restore normal provisioning and will provide the next update as more information becomes available.

We are continuing to investigate this issue.

We have identified certificate provisioning timeouts related to the new connection provisioning impact. We are working to restore normal provisioning and will provide the next update as progress is made.

Certificate provisioning is recovering, and provisioning requests are being processed. A backlog remains, and pending or new connection provisioning and customer onboarding requests may be delayed. We are monitoring processing and will provide the next update once normal provisioning timelines have been confirmed.

Copenhagen is also experiencing delays for pending and new connection or onboarding requests due to the certificate provisioning backlog.

Certificate provisioning recovery remains in progress. Pending and new connection provisioning or customer onboarding requests may still be delayed while the backlog is being worked through.

Certificate provisioning has returned to normal processing, and new connection provisioning and onboarding requests are completing successfully. We’re Here to Help If you have any questions or need assistance, please contact our support team.

We are investigating an issue affecting Cisco Umbrella customers with DNS policies configured to block the "M365 Copilot" and "Microsoft Copilot" application categories. Affected customers may experience access issues with some Microsoft 365 services, including Outlook and Office applications, where related Microsoft hostnames may be matched to these Copilot application categories and blocked by policy. As a workaround, customers experiencing this issue can temporarily remove or allow the "M365 Copilot" and "Microsoft Copilot" application category blocks in their DNS policy. Customers should review any policy changes against their organization’s security requirements. Our engineering teams are actively investigating. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

We have identified the issue and are currently mitigating the impact. The previously provided workaround remains available for customers experiencing access issues with Microsoft 365 services. Customers may temporarily remove or allow the "M365 Copilot" and "Microsoft Copilot" application category blocks in their DNS policy, after reviewing the change against their organization’s security requirements. Updates and additional details will be provided as new information becomes available.

This issue has been resolved. Cisco Umbrella customers with DNS policies configured to block the "M365 Copilot" or "Microsoft Copilot" application categories should no longer experience related access issues with Microsoft 365 services. Customers who applied the previously provided workaround can review and restore their DNS policy settings as appropriate for their organization’s security requirements. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

We are currently investigating a critical issue affecting network infrastructure services globally. Customers may experience connectivity or access issues during this period. Our engineering teams are actively working to identify the root cause and restore full service as quickly as possible. We are coordinating across all relevant teams to ensure a swift resolution. Updates and additional details will be provided as new information becomes available. Thank you for your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We continue to investigate the global network infrastructure issue. Our infrastructure provider is working on stabilizing their systems, and we are monitoring the situation closely. We are seeing intermittent recovery attempts, and service may be unstable during this time. Our teams remain engaged with our infrastructure provider and are working toward full service restoration. We will provide another update if there is significant progress. Thank you for your continued patience.

The network infrastructure issue affecting Cisco Umbrella and Cisco Secure Connect services globally has been resolved as of 13:03 UTC. All services are now healthy and operating normally. Customers should experience full connectivity and access across all regions. We apologize for any inconvenience caused and thank you for your patience. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

This incident has been resolved.

We are investigating reports of certificate errors affecting some Cisco Umbrella customers using HTTPS inspection in the Los Angeles and Miami regions. Affected customers may experience certificate warnings or errors when accessing certain websites or applications inspected by Cisco Umbrella. Our engineering teams are actively investigating and gathering additional diagnostic information. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

This issue has been resolved. Cisco Umbrella customers using HTTPS inspection in the Los Angeles and Miami regions should no longer experience certificate warnings or errors when accessing websites or applications inspected by Cisco Umbrella. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

We are investigating an issue where some links on the Umbrella Overview dashboard page may not direct customers to the expected Activity page. A fix is currently in progress. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

This issue has been resolved. Metric links on the Umbrella Overview dashboard page are now directing customers to the expected Activity page. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

Customers may experience issues with the Umbrella Dashboard, policy processing, policy updates, configuration changes, and DLP Core connectivity. Existing configurations remain in place, and ongoing traffic processing is not expected to be impacted unless it requires the affected policy processing.

In addition to the previously communicated impact, customers using SCIM provisioning from Microsoft Entra ID (Azure AD), Okta, or Duo may experience failures synchronizing users and groups to Umbrella. As a result, new users, group membership changes, and identity updates will not be reflected until synchronization is restored. Existing policies and traffic enforcement for previously synchronized identities are not expected to be affected. Customers may also experience delays in DLP policy propagation and DLP reporting event processing. No data is lost; however, DLP policy changes may take longer than usual to be reflected in scan operations, and reporting events may be delayed in the Dashboard and log exports.

Mitigation actions have been completed, and the affected Umbrella services are recovering. Policy processing, policy updates, configuration changes, SCIM provisioning, DLP policy propagation, and DLP reporting event processing are returning to normal operation. We are continuing to monitor service stability to ensure a full recovery.

Mitigation actions have been completed, and Umbrella services are operating normally. We're Here to Help If you have any questions or need assistance, please contact our support team.

We are investigating a potential issue with Identity service affecting customers connecting globally. The issue is impacting new policy creation and new user connections; existing configurations and ongoing data traffic are not affected. Customers may experience intermittent failures impacting firewall and remote access. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution. Updates and additional details will be provided as new information becomes available.

The issue may impact policy processing for ZTA traffic , ZTNA enrollment , which could result in issues accessing Private Resources. New policy creation and new user connections may also be affected. Existing configurations remain in place, and ongoing data traffic is not expected to be impacted unless it requires affected policy processing.

Mitigation actions have been completed in Europe. Cisco is continuing mitigation region by region and monitoring service stability throughout the process.

The mitigation has been successfully completed across all regions, and the affected Identity service is operating normally. Policy processing for ZTA traffic, ZTNA enrollment, new policy creation, and new user connections have been restored. Existing configurations and ongoing data traffic remain unaffected. We appreciate your patience while we worked to resolve this issue.

Cisco Umbrella - DNS and Secure Web Gateway timeout errors - South America We are investigating an issue affecting DNS and Secure Web Gateway traffic for customers routed through the Mexico region. Customers may experience intermittent DNS resolution issues and 504 or 50X timeout errors when using Umbrella services in this region. Our engineering teams are actively investigating and working with the carrier providers to mitigate the impact and restore normal service. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

We are continuing to investigate the issue.

We are taking the MEX1 EDC site in Mexico out of rotation due to ongoing issues impacting anycast services, including DNS and Secure Web Gateway. This action is expected to mitigate most customer impact for traffic routed through this location. Some users may experience geo-blocking when accessing location-sensitive websites, including certain banking or government websites. Our engineering teams continue to monitor the service and work with carrier providers to restore normal resiliency. Updates and additional details will be provided as new information becomes available.

We have identified that the connectivity issues affecting the Mexico region are due to a fiber cut in the area. To ensure service stability, we have temporarily adjusted our traffic routing for this location. While this action minimizes the impact for most users, some may still experience intermittent access issues when visiting certain location-sensitive websites. Our team is working to repair the connection and restore full service as quickly as possible. We appreciate your patience and understanding as we work to improve your Cisco Umbrella experience.

The connectivity issues affecting the Mexico region have been resolved. The data center was brought back into rotation at 10:20 UTC, and all services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We're Here to Help If you have any questions or need assistance, please contact our support team. Thank you for your understanding and support as we work to improve your Cisco Umbrella experience.