Is Cisco Umbrella down?

Between approximately 14:15 and 15:40 UTC, customers using the Investigate dashboard and associated data retrieval APIs may have experienced 503 errors, unavailable graphs or data, and errors when retrieving logs or graph information. The issue has been resolved, and service has returned to normal.

We are investigating a network issue causing delays when creating or updating policies in Cisco Umbrella in Johannesburg, South Africa. Customers may experience longer than expected propagation times for recent policy changes. Our engineering teams are working to restore normal policy update processing. We will provide another update as soon as more information is available.

We are continuing to investigate the issue. Existing policies remain active. However, new or updated policy changes may take longer than expected to apply.

We have identified the issue and are applying mitigation. Existing policies remain active while recent policy changes may still be delayed.

Mitigation is underway, and we are seeing improvement. We will continue monitoring progress and provide another update as needed.

The network issue affecting Cisco Umbrella policy update processing in Johannesburg, South Africa has been resolved. New and updated policy changes are now applying as expected. We’re Here to Help If you have any questions or need assistance, please contact our support team.

We are investigating a potential issue with DNS service affecting customers connecting globally. Some Domains may be incorrectly categorised as DNS Tunneling VPN. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution.Updates and additional details will be provided as new information becomes available.

The team is actively monitoring the environment to validate service stability. We will provide a update once the incident has been fully resolved.

The issue affecting incorrectly categorized DNS Tunneling VPN issue for some domains has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We are currently monitoring elevated capacity utilization at the Europe (France) data center. To maintain service quality, this location has been temporarily removed from rotation for new connections. Customers with existing connections will remain connected and can continue using the service without interruption. New connection attempts will be automatically redirected to the nearest available data center configured for your organization. Customers connecting using a location-specific address may receive a certificate warning. We recommend using the automatic selection address to ensure seamless connectivity. Our engineering team will continue to monitor capacity throughout the day and will provide further updates as more information becomes available. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

The capacity condition affecting Europe (France) has been resolved. Cisco Secure Connect Remote Access client connections are operating normally. We’re Here to Help If you have any questions or need assistance, please contact our support team.

We have identified a connectivity issue affecting Cisco Secure Connect and Umbrella services in the Palo Alto data center. Customers whose traffic is routed through Palo Alto may be unable to establish new tunnels or pass traffic through existing tunnels. Cisco is actively implementing mitigation measures to restore service. We will provide further updates as more information becomes available.

We are continuing to work on a fix for this issue.

Cisco is actively working to mitigate the impact and restore traffic flow. We are continuing to investigate and will provide more information as it becomes available.

Cisco has taken the affected Palo Alto site out of rotation to mitigate impact for Cisco Secure Connect and Umbrella traffic. Customers whose traffic was routed through Palo Alto should be redirected to available sites. We are continuing to monitor traffic recovery while working with our infrastructure provider and will provide more information as it becomes available.

Recovery work is ongoing with our infrastructure provider to restore the affected connectivity path. We will share a restoration ETA as soon as one is available. We will provide further updates as more information becomes available.

We are continuing with the recovery work

The connectivity issue in the Palo Alto data center is now resolved. All services are restored and the site is back in rotation. We have confirmed that traffic flow is stable. Thank you for your patience.