[Cisco Secure Access] – Firewall Policy Enforcement Issue - Global

Update timeline

1. investigating Aug 28, 2026, 11:57 AM UTC

   We are currently investigating an issue affecting Firewall Policy Enforcement service in Cisco Secure Access. Our engineering team is actively working to restore normal service. Customers may see URL-based security policies applied with a default or unknown category verdict. TLS decryption decisions may also be affected for some traffic. All other functions remain operational. No customer action is required at this time. We will provide further updates as more information becomes available. We sincerely appreciate your patience and understanding.

2. investigating Aug 28, 2026, 12:42 PM UTC

   We are continuing to investigate this issue

3. investigating Aug 28, 2026, 12:45 PM UTC

   We are continuing to investigate this issue

4. investigating Aug 28, 2026, 01:09 PM UTC

   We are continuing to investigate this issue

5. identified Aug 28, 2026, 02:32 PM UTC

   We have identified the root cause affecting Policy Enforcement and are applying a mitigation while monitoring recovery. Customers may see URL-based security policies applied with default or unknown category verdicts, and some TLS decryption decisions may be affected.

6. monitoring Aug 28, 2026, 03:20 PM UTC

   The mitigation has been applied, and Policy Enforcement has recovered across the affected regions. We are monitoring service stability and validating URL categorization and TLS decryption decisions.

7. resolved Aug 28, 2026, 03:36 PM UTC

   The incident affecting Firewall as a Service has been resolved following successful production validation. No customer reports or escalations were received, and no customer action is required.