Cisco Secure Access incident
[Cisco Secure Access] - Intermittent Service Degradation - Global
Cisco Secure Access experienced a major incident on July 15, 2026 affecting Dashboard and Identity and 1 more component, lasting 2h 24m. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- identified Jul 15, 2026, 03:27 PM UTC
The issue affecting Dashboard, Identity, Policy Enforcement, and Zero Trust Access services continues to impact new policy creation, new user connections, ZTA policy processing, ZTNA enrollment, firewall, and Remote Access VPN . Existing configurations and ongoing data traffic remain unaffected. Our engineering team is actively implementing mitigation actions to restore service. We will provide additional updates as more information becomes available.
- identified Jul 15, 2026, 03:44 PM UTC
Along with the previously communicated impact, customers using SCIM provisioning from Microsoft Entra ID (Azure AD), Okta, or Duo may experience failures synchronizing users and groups to Cisco Secure Access. As a result, new users, group membership changes, and identity updates will not be reflected until synchronization is restored. Existing policies and traffic enforcement for previously synchronized identities are not expected to be affected.
- monitoring Jul 15, 2026, 05:52 PM UTC
Mitigation actions have been completed, and the affected services are recovering. New policy creation, new user connections, ZTA policy processing, ZTNA enrollment, firewall, Remote Access VPN, SCIM provisioning, DLP policy propagation, and DLP reporting event processing are returning to normal operation. We are continuing to monitor service stability to ensure a full recovery.
- resolved Jul 15, 2026, 06:08 PM UTC
Mitigation actions have been completed, and Cisco Secure Access services are operating normally. We're Here to Help If you have any questions or need assistance, please contact our support team.