WatchGuard Outage History
WatchGuard is up right nowPingoru has recorded 93 incidents for WatchGuard: 93 in the last 12 months and 26 in the last 90 days.
Show as a table
| Month | Incidents | Hours with an open incident |
|---|---|---|
| April 2026 | 11 | 259 of 720 (36%) |
| May 2026 | 3 | 26 of 744 (3%) |
| June 2026 | 5 | 21 of 720 (3%) |
| July 2026 | 6 | 14 of 744 (2%) |
| August 2026 | 11 | 68 of 744 (9%) |
| September 2026 | 6 | 164 of 720 (23%) |
| October 2026 | 9 | 189 of 593 (32%) |
Incidents, newest first
Minor March 31, 2026 2026-03-31 - GLOBAL- Login Issues for SAML SSO Users 29m Web UI Login:::AMER, Web UI Login:::EMEA, Web UI Login:::APAC, WatchGuard.com SSO (WGID):::CORE
Started Mar 31, 2026, 11:05 AM UTC· resolved Mar 31, 2026, 11:35 AM UTC
- identified Mar 31, 2026, 07:53 AM UTC
We are currently investigating reports of users experiencing issues when attempting to sign in to their WatchGuard accounts through the SAML SSO login flow. As a workaround, users can log in using their WatchGuard credentials until the issue is resolved. We'll post our next update in 1h, if not sooner.
- identified Mar 31, 2026, 08:57 AM UTC
We continue to work on the issue affecting logins through the SAML SSO login flow. We'll post our next update in 1h, if not sooner. Thanks for your patience.
- identified Mar 31, 2026, 10:03 AM UTC
Our teams have identified the issue and continue working to restore normal operations. We apologize for the inconveniences and any impact this may have had on you or your customers. We'll post our next update in 1h, if not sooner.
- monitoring Mar 31, 2026, 11:05 AM UTC
Our team has implemented a fix, and SAML SSO login to the Web UI is now functioning normally. We are continuing to monitor the system to ensure stability. While most SSO integrations will continue to work without any changes. We recommend updating your WatchGuard SAML metadata configuration in your Identity Provider (IdP) to ensure uninterrupted SSO login access. Please update the SAML metadata configuration at your end as configured during your initial SSO setup, by referring to the relevant integration guide for your IdP. WatchGuard Account SSO Integration with AuthPoint WatchGuard Account SSO Integration with Microsoft Entra ID WatchGuard Account SSO Integration with Auth0 WatchGuard Account SSO Integration with Duo and Active Directory WatchGuard Account SSO Integration with Okta We'll post our next update in 30 minutes, if not sooner.
- resolved Mar 31, 2026, 11:35 AM UTC
We are no longer experiencing issues with the SAML SSO login flow and this incident is now resolved. The service is operating normally at this time. However, if you are still experiencing issues with logging in, we suggest you review KB #000031400: Authentication error for MFA or SAML SSO login to WatchGuard Cloud. We apologize for the inconvenience and the impact this issue may have had on you or your customers.
Minor March 28, 2026 2026-03-28 - EMEA - Delay in ThreatSync Incident Generation 57m Event Analysis and Threat Detection:::EMEA, Incident Persistence:::EMEA
Started Mar 28, 2026, 07:16 PM UTC· resolved Mar 28, 2026, 08:13 PM UTC
- identified Mar 28, 2026, 07:16 PM UTC
We are currently experiencing delays in incident generation in ThreatSync in the EMEA region. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 1 hour, if not sooner.
- identified Mar 28, 2026, 07:33 PM UTC
A fix has been implemented and incident generation delays are beginning to decrease. Our teams are actively monitoring to ensure full recovery. We'll post our next update in 1 hour, if not sooner.
- monitoring Mar 28, 2026, 07:53 PM UTC
Our systems indicate that incident generation has returned to normal and we continue to monitor to ensure system stability. We'll post our next update in 30 minutes, if not sooner.
- resolved Mar 28, 2026, 08:13 PM UTC
This incident has been resolved and the service is operating normally at this time. Again, we apologize for any impact this may have had on you or your customers.
Major March 26, 2026 2026-03-26 - GLOBAL - AuthPoint Authentication Errors 1h 44m RADIUS:::AMER, RADIUS:::EMEA, RADIUS:::APAC, ADFS:::AMER and 2 more
Started Mar 26, 2026, 06:38 PM UTC· resolved Mar 26, 2026, 08:22 PM UTC
- investigating Mar 26, 2026, 06:38 PM UTC
We are currently investigating AuthPoint authentication errors for ADFS and Radius. We will post our next update within 30 minutes.
- identified Mar 26, 2026, 06:41 PM UTC
We have identified the issue and are working towards resolving it. We will post our next update within 30 minutes.
- identified Mar 26, 2026, 07:11 PM UTC
We are still working to restore normal operations, and will post our next update within 30 minutes.
- monitoring Mar 26, 2026, 07:41 PM UTC
We are still working to restore normal operations, and will post our next update within 30 minutes.
- monitoring Mar 26, 2026, 08:06 PM UTC
We have implemented a fix and will be monitoring our systems as they return to normal operations. We will post our next update within 30 minutes.
- resolved Mar 26, 2026, 08:22 PM UTC
This is now resolved.
Minor March 23, 2026 2026-03-23 - APAC - Delay on FireCloud Management Reports 3h 20m Reports:::APAC
Started Mar 23, 2026, 05:01 PM UTC· resolved Mar 23, 2026, 08:21 PM UTC
- identified Mar 23, 2026, 05:01 PM UTC
We have identified an issue affecting Firecloud Management Reports that resulted in a data gap in the Asia Pacific region. This gap includes data from 3/20/2026 through 3/23/2026. Our teams are actively working to restore normal reporting operations. We apologize for any inconvenience this may cause and appreciate your patience. We will provide an update within 3 hours, or sooner if new information becomes available.
- monitoring Mar 23, 2026, 07:56 PM UTC
We have addressed the issue and our systems are returning to normal operation. We will post our next update within one hour.
- resolved Mar 23, 2026, 08:21 PM UTC
This is now resolved.
Minor March 19, 2026 2026‑03‑19 - APAC - Delay on Firecloud Management Reports 1h 33m Reports:::APAC
Started Mar 19, 2026, 04:06 PM UTC· resolved Mar 19, 2026, 05:40 PM UTC
- identified Mar 19, 2026, 04:06 PM UTC
We have identified an issue affecting Firecloud Management Reports that resulted in a data gap of approximately three hours. Our teams are actively working to restore normal reporting operations. We apologize for any inconvenience this may cause and appreciate your patience. We will provide an update within 3 hours, or sooner if new information becomes available.
- resolved Mar 19, 2026, 05:40 PM UTC
All systems are now back to normal operation. This is now resolved.
Minor March 16, 2026 2026-03-16 - EMEA - AuthPoint Authentication service degradation 39m RADIUS:::EMEA, SAML:::EMEA, Logon Agents:::EMEA
Started Mar 16, 2026, 03:22 PM UTC· resolved Mar 16, 2026, 04:02 PM UTC
- investigating Mar 16, 2026, 03:22 PM UTC
We're investigating alerts on AuthPoint Authentication service. Once we determine the impact and scale of these errors we'll post our next update in 30 minutes, if not sooner.
- identified Mar 16, 2026, 03:32 PM UTC
We continue to work on alerts on AuthPoint Authentication service and have identified the issue. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 30 minutes, if not sooner.
- monitoring Mar 16, 2026, 03:45 PM UTC
Our systems show on AuthPoint Authentication service are returning to normal and we're monitoring to ensure system stability. We'll post our next update in 60 minutes, if not sooner.
- resolved Mar 16, 2026, 04:02 PM UTC
We are no longer experiencing alerts on AuthPoint Authentication service and this incident is now resolved. The service is operating normally at this time.
Critical March 5, 2026 2026-03-05 - GLOBAL - Issue with Signature Services 1h 51m Software Downloads:::CORE
Started Mar 05, 2026, 09:00 PM UTC· resolved Mar 05, 2026, 10:52 PM UTC
- investigating Mar 05, 2026, 09:00 PM UTC
We are currently investigating an issue where devices are unable to download the latest signature updates. We will post our next update within two hours.
- monitoring Mar 05, 2026, 10:04 PM UTC
A fix has been implemented, and our systems are now returning to normal operation. We will keep monitoring and post our next update within an hour.
- resolved Mar 05, 2026, 10:52 PM UTC
All systems are now back to normal operation. This is now resolved.
Minor March 5, 2026 2026-03-05 - AMER - ThreatSync and MDR Ingestion Delay 6h 40m Incident Persistence:::AMER
Started Mar 05, 2026, 01:34 PM UTC· resolved Mar 05, 2026, 08:15 PM UTC
- investigating Mar 05, 2026, 01:34 PM UTC
We are investigating new delays in ThreatSync ingestion, which is also impacting MDR ingestion. MDR relies on ThreatSync for the following data sources: - Firebox - AuthPoint - NDR We'll post our next update within an hour.
- investigating Mar 05, 2026, 02:37 PM UTC
We are still working hard to resolve this event. Please check back in 2 hours for updates. Thanks for your patience.
- identified Mar 05, 2026, 04:35 PM UTC
We have identified the issue and are working to resolve it. We will post out next update within three hours.
- monitoring Mar 05, 2026, 06:26 PM UTC
We have resolved the issue and are now monitoring our systems as they return to normal operation. We will post our next update within three hours.
- resolved Mar 05, 2026, 08:15 PM UTC
All systems have returned to normal operation. This is now resolved. Thank you for your patience.
Minor March 4, 2026 2026-03-04 - AMER - ThreatSync and MDR Ingestion Delay 12h 29m Incident Persistence:::AMER
Started Mar 04, 2026, 05:53 PM UTC· resolved Mar 05, 2026, 06:22 AM UTC
- investigating Mar 04, 2026, 05:53 PM UTC
We are experiencing an issue causing delays in ThreatSync ingestion, which is also impacting MDR ingestion. MDR relies on ThreatSync for the following data sources: - Firebox - AuthPoint - NDR We'll post our next update within an hour.
- identified Mar 04, 2026, 06:51 PM UTC
We have identified the issue and are working to resolve it. We will post out next update within an hour.
- identified Mar 04, 2026, 07:50 PM UTC
We are still working hard to resolve the issue. We will post our next update within two hours.
- identified Mar 04, 2026, 09:57 PM UTC
We are still working hard to resolve the issue. We will post our next update within three hours.
- monitoring Mar 04, 2026, 10:31 PM UTC
We have resolved the issue and are now monitoring our systems as they return to normal operation. We will post our next update within three hours.
- monitoring Mar 05, 2026, 01:13 AM UTC
We continue to monitor our systems as they recover. We will post our next update within three hours.
- monitoring Mar 05, 2026, 04:00 AM UTC
We continue to monitor our systems as they recover. We will post our next update within four hours.
- resolved Mar 05, 2026, 06:22 AM UTC
We are no longer experiencing alerts on ThreatSync/MDR ingestion services and this incident is now resolved. The systems are operating normally at this time.
Minor February 13, 2026 2026-02-13 - GLOBAL- Login Issues for SAML SSO Users 2h 47m WatchGuard.com SSO (WGID):::CORE
Started Feb 13, 2026, 05:23 PM UTC· resolved Feb 13, 2026, 08:11 PM UTC
- investigating Feb 13, 2026, 04:51 PM UTC
We are investigating reports of some users having issues when log in via SAML SSO. We'll post our next update in 30min, if not sooner.
- investigating Feb 13, 2026, 05:23 PM UTC
We are continuing to investigate reports of users experiencing login issues via SAML SSO. The issue appears to be limited to the SAML SSO Reference URLs (Quick Launch SSO URLs). As a workaround, please use the actual URLs of WatchGuard sites instead of the Quick Launch SSO links when logging in. We'll post our next update in 30 minutes, if not sooner.
- identified Feb 13, 2026, 06:03 PM UTC
We have identified the issue and a fix is being implemented. The issue is caused by a recent change in our app service that handles redirection of SAML SSO Reference URLs. We'll post our next update in 30 minutes, if not sooner.
- monitoring Feb 13, 2026, 06:21 PM UTC
A fix has been implemented and we are no longer experiencing the issue. We are monitoring the system to ensure stability. We'll post our next update in 30 minutes, if not sooner.
- monitoring Feb 13, 2026, 06:46 PM UTC
This incident has been resolved and the service is operating normally at this time. We apologize for any impact this may have had on you or your customers.
- resolved Feb 13, 2026, 08:11 PM UTC
This incident has been resolved and the service is operating normally at this time. Again, we apologize for any impact this may have had on you or your customers.
Minor February 11, 2026 2026-02-11 - GLOBAL - Activation Issues 1h 25m Activations:::CORE
Started Feb 11, 2026, 07:42 AM UTC· resolved Feb 11, 2026, 09:08 AM UTC
- investigating Feb 11, 2026, 07:42 AM UTC
We're currently experiencing failures in our activation system. Once we determine the impact and scale of these potential issues we'll post our next update in 30m, if not sooner. Thanks for your patience.
- identified Feb 11, 2026, 08:27 AM UTC
Our team is working hard on the activation issues and have identified the issue. Some customers are getting a message of unexpected error when they try to activate products.
- monitoring Feb 11, 2026, 08:37 AM UTC
The team has implemented a fix and activation systems is returning to normal. We apologize for the impact this event has caused. We'll post our next update in 30 minutes, if not sooner.
- resolved Feb 11, 2026, 09:08 AM UTC
We are no longer experiencing alerts on Activations service and this incident is now resolved. The service is operating normally at this time. Again, we apologize for any impact this may have had on you or your customers.
Minor February 7, 2026 2026-02-07 - AMER - WatchGuard Endpoint Security Dashboard Issue 4h 10m Administration:::AMER, Dashboards and Reports:::AMER
Started Feb 07, 2026, 08:30 PM UTC· resolved Feb 08, 2026, 12:41 AM UTC
- identified Feb 07, 2026, 04:14 PM UTC
We are currently experiencing a service degradation affecting WatchGuard Cloud Dashboards. The root cause has been identified, and our teams are actively working on restoring normal functionality. We apologize for the impact and will provide an update in 60 minutes, if not sooner.
- identified Feb 07, 2026, 04:58 PM UTC
We are continuing to work on the service degradation affecting WatchGuard Cloud Dashboards. As part of our mitigation efforts, we have confirmed that the issue involves one of our third-party service dependencies and we apologize for the impact this event has caused. We'll post our next update in 60 minutes, if not sooner.
- identified Feb 07, 2026, 06:00 PM UTC
We are continuing to investigate the service degradation affecting WatchGuard Cloud Dashboards. The issue is related to one of our third-party service dependencies, and our teams are closely monitoring the situation. We'll post our next update in 60 minutes, if not sooner.
- identified Feb 07, 2026, 07:01 PM UTC
We are still working hard to address the service degradation impacting WatchGuard Cloud Dashboards. The issue is associated with a third-party service dependency, and our teams continue to monitor the situation closely. We'll post our next update in 2 hours, if not sooner.
- identified Feb 07, 2026, 07:28 PM UTC
We are still working hard to resolve the event, and this only affects the WatchGuard Endpoint Security Dashboard. The issue is associated with a third-party service dependency, and our teams continue to monitor the situation closely. We'll post our next update in 60 minutes, if not sooner.
- identified Feb 07, 2026, 08:32 PM UTC
We continue to work on resolving the event affecting the WatchGuard Endpoint Security Dashboard. Our teams are closely monitoring the situation, and the issue involves a third-party service dependency. We'll post our next update in 60 minutes, if not sooner.
- identified Feb 07, 2026, 09:37 PM UTC
We continue to work on resolving the event affecting the WatchGuard Endpoint Security Dashboard. Some customers may see the service working as expected, though full functionality has not yet been restored. The third-party service dependency is in the process of recovery, and our teams continue to monitor the situation closely. We’ll provide another update in 60 minutes, if not sooner. Thanks for your patience.
- identified Feb 07, 2026, 10:36 PM UTC
We are continuing efforts to resolve the event impacting the WatchGuard Endpoint Security Dashboard. While some customers may experience the service functioning normally, full functionality has not yet been restored. The third-party service dependency is currently recovering, and our teams are closely monitoring the situation. We apologize for the impact this event has caused. We’ll post our next update in 60 minutes, if not sooner. Thank you for your continued patience.
- monitoring Feb 07, 2026, 11:46 PM UTC
Our system shows the issues with the WatchGuard Endpoint Security Dashboard are returning to normal and we're monitoring to ensure system stability. We'll post our next update in 60 minutes, if not sooner.
- resolved Feb 08, 2026, 12:41 AM UTC
Our systems have recovered, and this is now resolved. We apologize for the inconvenience that this may have caused for you.
Minor February 3, 2026 2026-02-03 - EMEA - Issues with token activation and management on Authpoint 1h 2m User and Token Administration:::EMEA
Started Feb 03, 2026, 10:42 AM UTC· resolved Feb 03, 2026, 11:44 AM UTC
- identified Feb 03, 2026, 10:42 AM UTC
We are working on alerts on token activation service and have identified the issue. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 60 minutes, if not sooner.
- monitoring Feb 03, 2026, 11:22 AM UTC
Our systems show alerts on token activation service are returning to normal and we're monitoring to ensure system stability. We'll post our next update in 30 minutes, if not sooner.
- resolved Feb 03, 2026, 11:44 AM UTC
We are no longer experiencing alerts on token activation service and this incident is now resolved. The service is operating normally at this time.
Minor February 3, 2026 2026-02-03 - GLOBAL - Issues with New Product Activations 2h 16m Activations:::CORE
Started Feb 03, 2026, 05:57 AM UTC· resolved Feb 03, 2026, 08:13 AM UTC
- investigating Feb 03, 2026, 05:57 AM UTC
We're investigating issues with new activation. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 1 hour, if not sooner.
- identified Feb 03, 2026, 06:59 AM UTC
We continue to work on the issues with product activation and have identified the issue, related to a 3rd party provider. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 1 hour, if not sooner.
- monitoring Feb 03, 2026, 07:42 AM UTC
We are no longer experiencing issues with product activation in WatchGuard Cloud, we continue monitoring the performance of the activation services. We remain engaged and continue to investigate this issue. We'll post our next update in 30 minutes, if not sooner.
- resolved Feb 03, 2026, 08:13 AM UTC
This incident has been resolved and the service is operating normally at this time. The issue was caused by problems with our third-party provider. Again, we apologize for any impact this may have had on you or your customers.
Minor January 30, 2026 2026-01-30 - GLOBAL - WGC Login issues 9h 54m Web UI Login:::AMER, Web UI Login:::EMEA, Web UI Login:::APAC
Started Jan 30, 2026, 10:31 AM UTC· resolved Jan 30, 2026, 08:25 PM UTC
- investigating Jan 30, 2026, 10:31 AM UTC
We are currently experiencing issues affecting customer logins to the WatchGuard Cloud UI service. As a temporary workaround, customers can access the service by navigating directly to: https://cloud.watchguard.com We are actively investigating the scope and impact of the issue, and we will provide our next update within 30 minutes, or sooner if available.
- investigating Jan 30, 2026, 11:02 AM UTC
We continue to work on the issue affecting customers logging into WatchGuard Cloud UI service. The issue is still under investigation, we apologize for the inconveniences and any impact this may have had on you or your customers. We'll post our next update in 1h, if not sooner.
- identified Jan 30, 2026, 11:57 AM UTC
We’ve identified the issue and are in the process of implementing a fix. We’ll provide the next update as soon as we have additional details. Thank you for your patience.
- identified Jan 30, 2026, 03:50 PM UTC
We are still working hard to resolve the login page loading issues. We will provide our next update in 3 hours, if not sooner. We encourage our customers to log in using cloud.watchguard.com instead of directly accessing a regional URL.
- identified Jan 30, 2026, 06:50 PM UTC
We continue to work toward resolving the login page loading issues. Our teams remain actively engaged in fixing the issue. We will provide our next update within the next 2 hours, if not sooner. In the meantime, we encourage customers to log in using cloud.watchguard.com instead of directly accessing a regional URL.
- resolved Jan 30, 2026, 08:25 PM UTC
We are no longer experiencing issues with WGC login and this incident is now resolved. The services are operating normally at this time. Again, we apologize for any impact this may have had on you or your customers.
Minor January 29, 2026 2026-01-29- GLOBAL - Panda System Management new UI not operational 3h 6m System Management Service:::GLOBE
Started Jan 29, 2026, 07:41 AM UTC· resolved Jan 29, 2026, 10:47 AM UTC
- investigating Jan 29, 2026, 07:41 AM UTC
We're currently investigating reports of an issue with a third‑party service provider that is affecting the new System Management UI. The classic (old) UI remains fully operational, so customers requiring immediate access can switch from the new UI to the old one through this link: https://sm.pandasecurity.com/csm/profile Once we determine the impact and scale of these potential issues we'll post our next update in 30 minutes, if not sooner.
- identified Jan 29, 2026, 08:28 AM UTC
We continue to work closely with our third‑party provider to restore the service as quickly as possible. We will share our next update within the next 60 minutes
- identified Jan 29, 2026, 09:30 AM UTC
We continue to work with our third‑party provider on the issue affecting the new System Management UI. The investigation is still ongoing, and we apologize for the inconvenience and any impact this may have had on you or your customers. We will post our next update in one hour, or sooner if available.
- monitoring Jan 29, 2026, 10:17 AM UTC
Our third-party service provider has implemented a fix, and we are no longer experiencing issues with the new System Management UI. We will continue to monitor the situation to ensure full system stability. We will post our next update in 30 minutes, if not sooner.
- resolved Jan 29, 2026, 10:47 AM UTC
We are no longer experiencing issues withe the new System Management UI and this incident is now resolved. The services are operating normally at this time. Again, we apologize for any impact this may have had on you or your customers.
Minor January 27, 2026 2026-01-27 - GLOBAL- Login Issues for MFA & SAML SSO Users 45m Web UI Login:::AMER, Web UI Login:::EMEA, Web UI Login:::APAC, WatchGuard.com SSO (WGID):::CORE
Started Jan 27, 2026, 03:37 AM UTC· resolved Jan 27, 2026, 04:22 AM UTC
- investigating Jan 27, 2026, 03:05 AM UTC
We’re currently investigating alerts related to login errors affecting some users. At this time, the issue appears to impact only users who have MFA enabled or who are logging in via SAML SSO. We'll post our next update in 30min, if not sooner.
- identified Jan 27, 2026, 03:37 AM UTC
We’ve identified the issue, and a fix is being implemented. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 30min, if not sooner.
- monitoring Jan 27, 2026, 03:52 AM UTC
We are no longer experiencing login issues. The fix has been implemented, and we are continuing to monitor system performance. We’ll post our next update in 30 minutes, if not sooner.
- resolved Jan 27, 2026, 04:22 AM UTC
This incident has been resolved and the service is operating normally at this time. Again, we apologize for any impact this may have had on you or your customers.
Minor January 26, 2026 2026-01-26 - APAC - ThreatSync blocked items management and incident details inaccessible 51m Event Analysis and Threat Detection:::APAC, Manual Remediation:::APAC, Blocked-Sites Management:::APAC
Started Jan 26, 2026, 03:46 PM UTC· resolved Jan 26, 2026, 04:37 PM UTC
- identified Jan 26, 2026, 03:46 PM UTC
We have identified an issue in ThreatSync APAC preventing to view the incidents details and manage the ThreatSync blocked sites. This does not affect automated remediation with ThreatSync. The next update would be in 1 hour if not sooner .
- monitoring Jan 26, 2026, 03:58 PM UTC
The team has deployed mitigation measures and the Threatsync service is returning to normal. We are monitoring to ensure system stability. We'll post our next update in 30 min if not sooner.
- resolved Jan 26, 2026, 04:37 PM UTC
We are no longer experiencing issues on ThreatSync and this incident is now resolved. The service is operating normally at this time. We apologize for any impact this may have had on you or your customers.
Notice January 25, 2026 2026-01-24 - AMER - Managed Services Update on M365 Monitoring Interruption –
Started Jan 25, 2026, 03:00 PM UTC· resolved Jan 25, 2026, 03:00 PM UTC
- resolved Jan 27, 2026, 03:28 AM UTC
On January 24 at 15:00 UTC, one of the background tasks responsible for delivering Microsoft 365 telemetry into our MDR service stopped running correctly, resulting in a partial degradation of monitoring. Built‑in Microsoft 365 alerts were not affected. Our engineering team resolved the issue on January 26 at 23:30 UTC, and normal monitoring has since been fully restored. This was a partial outage affecting only a portion of Microsoft 365 derived detections. Current Status: Monitoring is fully restored. Only a subset of detections was affected; native Microsoft 365 alerts remained unaffected. SOC teams have applied enhanced monitoring to ensure continued pipeline stability. No customer action is required at this time. If we identify anything that requires your attention, we will notify you immediately. Next Steps: We are investigating options to backfill telemetry from the affected period Additional safeguards are being evaluated to detect and prevent similar task interruptions in the future.
Minor January 22, 2026 2026-01-22 - GLOBAL - FireCloud PoPs Issue 6h 23m Health and Connectivity:::AMER, Health and Connectivity:::EMEA, Health and Connectivity:::APAC
Started Jan 22, 2026, 02:15 PM UTC· resolved Jan 22, 2026, 08:39 PM UTC
- identified Jan 22, 2026, 02:15 PM UTC
We have identified an issue impacting FireCloud PoPs. Our teams are actively working to fix root cause, after a security update to the FireCloud PoPs caused an issue with healthy and connectivity. Regions are being refreshed and connectivity should be established as soon as possible. We'll post our next update in 1 hour, if not sooner.
- identified Jan 22, 2026, 03:19 PM UTC
We are still working hard to resolve this event. Please check back in 1 hour for updates. Thanks for your patience.
- identified Jan 22, 2026, 04:45 PM UTC
Our team is actively working to restore the FireCloud Health and Connectivity service to normal operations. Please check back in one hour for further updates.
- identified Jan 22, 2026, 05:40 PM UTC
Our team continues to actively work on restoring the FireCloud Health and Connectivity service to normal operations. We will post our next update within two hours.
- identified Jan 22, 2026, 07:30 PM UTC
Our team continues to actively work on restoring the FireCloud Health and Connectivity service to normal operations. We will post our next update within two hours.
- resolved Jan 22, 2026, 08:39 PM UTC
FireCloud Health and Connectivity are now restored to normal operations. This is now resolved. We apologize for any inconvenience that this may have had on you.
- postmortem Jan 30, 2026, 07:15 PM UTC
Initial Event Summary: The WatchGuard FireCloud PoPs experienced a service disruption in all Global regions approximately between January 22nd 12:31 UTC to 20:00 UTC. This resulted in the FireCloud PoPs becoming unhealthy and unable to accept connections from FireCloud clients. The event is now resolved, and all FireCloud services are now operating normally for all users. Initial Event Findings: At approximately 12:31 UTC on Jan 22, 2026 our on-call engineers were alerted to a potential issue in the Americas region and found that the issue spanned to all Global regions. During our investigation, monitoring indicated that our PoP's network connectivity had dropped to zero indicating no clients connected. After further investigation, our team discovered that an automatic 3rd party infrastructure provider security update resulted in critical PoP services being unable to communicate. As a result, the FireCloud clients could authenticate but not establish connections to FireCloud PoPs. Our teams worked to mitigate the impact by deploying healthy PoPs and adjusting FireCloud data as needed to allow for successful client connection. At approximately 20:00 UTC, the FireCloud Global PoPs were restored to a healthy state and the FireCloud clients could successfully connect to FireCloud. Moving Forward: Our team will evaluate and test 3rd party infrastructure provider security updates manually prior to deployment. We are in communication with the 3rd party infrastructure provider to address the impact of this event. We sincerely apologize for the impact on our affected customers and we know the stability of the FireCloud is important to you and your business. At WatchGuard, we will never be satisfied with any events that impact our customer operations and we will continue to do everything we can to drive improvements across our services.
Minor January 20, 2026 2026-01-20 - GLOBAL - Issues with New Product Activations 56m Activations:::CORE
Started Jan 20, 2026, 09:36 AM UTC· resolved Jan 20, 2026, 10:32 AM UTC
- investigating Jan 20, 2026, 09:36 AM UTC
We're investigating issues with new product activation showing in WatchGuard Cloud. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 1 hour, if not sooner.
- identified Jan 20, 2026, 09:50 AM UTC
We continue to work on the issues with product activation and have identified the issue, related to a 3rd party provider. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 1 hour, if not sooner.
- monitoring Jan 20, 2026, 10:04 AM UTC
We are no longer experiencing issues with product activation in WatchGuard Cloud, we continue monitoring the performance of the activation services. We remain engaged and continue to investigate this issue. We'll post our next update in 30 minutes, if not sooner.
- resolved Jan 20, 2026, 10:32 AM UTC
This incident has been resolved and the service is operating normally at this time. The issue was caused by problems with our third-party provider. Again, we apologize for any impact this may have had on you or your customers.
Minor January 6, 2026 2026-01-06 - GLOBAL- WatchGuard Cloud Operator Administration Issues 2h 15m Operator Administration:::AMER, Operator Administration:::EMEA, Operator Administration:::APAC
Started Jan 06, 2026, 06:32 AM UTC· resolved Jan 06, 2026, 08:48 AM UTC
- investigating Jan 06, 2026, 06:32 AM UTC
We're investigating alerts on Watchguard Cloud Operator Administration service. Once we determine the impact and scale of these errors we'll post our next update in 60 minutes, if not sooner.
- identified Jan 06, 2026, 07:00 AM UTC
We have identified the issue in WatchGuard Cloud Operator Administration service. Our teams are working to fix a configuration issue and restore normal operations. We apologize for the impact this event has caused. We'll post our next update in 30 minutes, if not sooner.
- identified Jan 06, 2026, 07:47 AM UTC
Our team continue to work on restoring normal operations in Watchguard Cloud Operator Administration service. We apologize for the impact this event has caused. We'll post our next update in 60 minutes, if not sooner.
- monitoring Jan 06, 2026, 08:16 AM UTC
Our WatchGuard Cloud Operator Administration service is returning to normal and we're monitoring to ensure system stability. We'll post our next update in 30 minutes, if not sooner.
- resolved Jan 06, 2026, 08:48 AM UTC
We are no longer experiencing problems on WatchGuard Cloud Operator Administration service and this incident is now resolved. The service system is operating normally at this time.
Minor January 5, 2026 2026-01-05 - Global - Issue with Invalid Proxy Certificate Expiration 3h 10m Health and Connectivity:::AMER, Health and Connectivity:::EMEA, Health and Connectivity:::APAC
Started Jan 05, 2026, 04:31 AM UTC· resolved Jan 05, 2026, 07:41 AM UTC
- investigating Jan 05, 2026, 04:31 AM UTC
We are currently investigating reports of an invalid proxy certificate expiration impacting FireCloud PoPs. Users affected by an invalid proxy certificate expiration date may be unable to properly access internet websites. Our teams are actively investigating the root cause of this issue. We'll post our next update in 12 hours, if not sooner.
- monitoring Jan 05, 2026, 07:15 AM UTC
A fix was applied and FireCloud PoPs are operating normally, we're monitoring to ensure system stability. We'll post our next update in 30 minutes, if not sooner.
- resolved Jan 05, 2026, 07:41 AM UTC
We are no longer experiencing reports of invalid proxy certificate expiration impacting FireCloud PoPs and this incident is now resolved. The FireCloud PoPs service is operating normally at this time.
Minor December 31, 2025 2025-12-31 - EMEA - Issues with Non-PDF File Analysis 2h 58m
Started Dec 31, 2025, 04:14 PM UTC· resolved Dec 31, 2025, 07:13 PM UTC
- investigating Dec 31, 2025, 04:14 PM UTC
The non-PDF file analysis service is experiencing issues in the EMEA region. Our team is investigating this and will post an update within the next 2 hours.
- identified Dec 31, 2025, 06:02 PM UTC
We have identified the issue and are working towards resolving it. We will post our next update within the next 6 hours.
- resolved Dec 31, 2025, 07:13 PM UTC
The issue has been resolved. We apologize for any inconvenience that this may have caused.
Minor December 27, 2025 2025-12-27 - Global - The zero-trust attestation service is experiencing delays 3h 18m Protection:::GLOBE, Protection:::AMER, Protection:::EMEA, Protection:::APAC
Started Dec 27, 2025, 06:28 PM UTC· resolved Dec 27, 2025, 09:46 PM UTC
- investigating Dec 27, 2025, 06:28 PM UTC
The zero-trust attestation service is experiencing a problem creating delays in the human verification of goodware vs badware within our typical 4hr window when our automated systems are unable to classify a program or file. Both local protection and our automated machine learning classification systems are operating normally therefore most customers will not see an impact. We will post our next update within 4 hours.
- investigating Dec 27, 2025, 06:31 PM UTC
We are continuing to investigate this issue.
- resolved Dec 27, 2025, 09:46 PM UTC
This is now resolved. We apologize for the impact that this may have had on you.