Cisco Umbrella Outage History

Started Oct 22, 2026, 04:45 PM UTC· resolved Oct 23, 2026, 03:46 AM UTC

1. identified Oct 22, 2026, 04:45 PM UTC

   We have identified an issue related to a third-party certificate that can cause SWG traffic disruptions in Cisco Umbrella and Cisco Secure Connect. We are assessing the scope of the impact and working toward a fix. We will provide further updates as more information becomes available.

2. identified Oct 22, 2026, 06:56 PM UTC

   Engineering is implementing and rolling out fixes to address the SWG traffic disruptions related to the third-party certificate issue. We are continuing to assess the impact and will provide further updates as the work progresses.

3. resolved Oct 23, 2026, 03:46 AM UTC

   The third-party certificate issue affecting SWG traffic disruptions in Cisco Umbrella and Cisco Secure Connect has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

Read the full incident report →

Started Oct 21, 2026, 02:56 PM UTC· resolved Oct 22, 2026, 08:09 AM UTC

1. investigating Oct 21, 2026, 02:56 PM UTC

   We are addressing an issue affecting SWG traffic across Cisco Umbrella and Cisco Secure Connect. Customers with file inspection enabled for SWG traffic are not expected to experience this issue. Customers without file inspection enabled may continue to experience SWG traffic disruptions while the fix is being rolled out. Engineering is rolling out a fix across the affected infrastructure. We’ll provide further updates as the rollout progresses.

2. identified Oct 21, 2026, 03:53 PM UTC

   Cisco engineering continues to roll out and validate a remediation for the impact on SWG traffic caused by the eMudhra certificate issue across Cisco Umbrella and Cisco Secure Connect.

3. resolved Oct 22, 2026, 08:09 AM UTC

   The issue affecting Secure Web Gateway traffic, caused by a third-party certificate issue, has been resolved as of 07:56 UTC on October 22, 2026. Cisco engineering has completed and validated the remediation across all affected services, and all services are operating as expected. We apologize for any inconvenience caused and thank you for your patience. We're Here to Help If you continue to experience issues, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Connect and Cisco Umbrella experience.

Read the full incident report →

Started Oct 21, 2026, 01:35 AM UTC· resolved Oct 21, 2026, 02:05 AM UTC

1. investigating Oct 21, 2026, 02:32 AM UTC

   Between 01:35 UTC and 02:05 UTC, some customers connecting through the Miami data center may have experienced intermittent connectivity or traffic disruption. The issue has been resolved, and all services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

2. resolved Oct 21, 2026, 02:33 AM UTC

   This incident has been resolved.

Read the full incident report →

Started Oct 20, 2026, 12:24 AM UTC· resolved Oct 20, 2026, 12:24 AM UTC

1. resolved Oct 20, 2026, 12:24 AM UTC

   We identified a service disruption affecting the Remote Access (Client) service at our Melbourne location (MEL1.EDC). Affected customers could establish a Remote Access VPN session but were unable to access the Internet or other resources through the VPN connection. The Melbourne location was taken out of rotation, and new connection requests are being redirected to Sydney. Customer impact has been mitigated. We are monitoring service stability and continuing to investigate the underlying issue. Additional updates will be provided as new information becomes available.

Read the full incident report →

Started Oct 18, 2026, 07:48 PM UTC· resolved Oct 18, 2026, 10:52 PM UTC

1. investigating Oct 18, 2026, 07:48 PM UTC

   We are investigating a control-plane issue affecting MAD1 and MIL1 data center. The affected locations are unable to reach a central service required to renew certificates and manage tunnel connections. Existing tunnels continue to operate while they remain stable and no configuration changes are needed. Attempts to establish new tunnels or modify existing tunnels can fail. Customer traffic is not currently impacted while existing tunnels and front ends remain stable. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution.Updates and additional details will be provided as new information becomes available.

2. identified Oct 18, 2026, 10:36 PM UTC

   Restoration is underway, and services are improving. We’ll continue monitoring and provide another update as needed.

3. resolved Oct 18, 2026, 10:52 PM UTC

   The issue affecting services in MAD1.edc and MIL1.edc has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

Read the full incident report →

Started Oct 18, 2026, 10:21 AM UTC· resolved Oct 18, 2026, 11:20 AM UTC

1. investigating Oct 18, 2026, 10:21 AM UTC

   We are investigating an issue affecting Cisco Umbrella API services globally. Affected customers may experience API request failures. Our engineering teams are actively investigating the issue and working to restore normal service. Updates and additional details will be provided as new information becomes available.

2. resolved Oct 18, 2026, 11:20 AM UTC

   The issue affecting Cisco Umbrella API services globally has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Umbrella experience.

Read the full incident report →

Started Oct 10, 2026, 11:47 PM UTC· resolved Oct 10, 2026, 11:47 PM UTC

1. resolved Oct 10, 2026, 11:47 PM UTC

   On October 10, some Cisco Umbrella customers using roaming clients may have experienced connection instability or an inability to access the Internet. The issue affected environments where domains required to validate the new certificates were blocked by customer network or Umbrella policies, preventing certificate validation from completing successfully. Affected customers could temporarily restore connectivity by allowing the required certificate-validation domains through their policies. The certificate migration was rolled back at 20:47 UTC, restoring normal service. This incident has been resolved. Thank you for your patience. If you continue to experience issues, please contact Cisco Support.

Read the full incident report →

Started Oct 09, 2026, 09:15 AM UTC· resolved Oct 09, 2026, 02:15 PM UTC

1. investigating Oct 09, 2026, 09:15 AM UTC

   We are investigating elevated capacity utilization affecting Remote Access Client at the Europe (Paris) data center. To maintain service quality and reliability, this location has been temporarily removed from rotation for new connections. Customers may experience the following: Existing connections will remain active, and customers can continue using the service without interruption. New connection attempts will be automatically redirected to the nearest available data center configured for your organization. Customers connecting with a location-specific address may receive a certificate warning. We recommend using the automatic selection address for seamless connectivity. Our engineering team is actively monitoring capacity at this location throughout the day and is taking steps to minimize any further impact. Updates and additional details will be provided as new information becomes available. We sincerely appreciate your patience and understanding.

2. resolved Oct 09, 2026, 02:15 PM UTC

   The Paris (CDG1) data center has been restored to service, and services are operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Oct 03, 2026, 04:21 AM UTC· resolved Oct 04, 2026, 01:31 AM UTC

1. resolved Oct 03, 2026, 04:21 AM UTC

   Between approximately 02 Oct 2026 23:48 UTC and 03 Oct 2026 01:31 UTC, Customers using the dashboard may have experienced duplicate headers and some pages not loading. The issue has been resolved, and service has returned to normal.

Read the full incident report →

Started Oct 02, 2026, 08:15 PM UTC· resolved Oct 09, 2026, 08:43 PM UTC

1. investigating Oct 02, 2026, 08:15 PM UTC

   Customers using Cisco Umbrella might be unable to access some Akamai-hosted domains due to DNSSEC validation failure.Our teams are investigating and working to restore access. We will provide updates as more information becomes available.

2. identified Oct 02, 2026, 10:23 PM UTC

   We have identified that the issue occurs with domains hosted on Akamai IPv6 name servers that return a DNS response that is larger than 1410 bytes. These responses are being truncated which causes a Servfail response from the Cisco resolvers. We are continuing to work with Akamai to resolve this issue, we have the following proposed workaround. Work Around You can bypass the impacted domains from Cisco DNS. This can be performed with the Domain Management configuration for managed devices (Virtual Appliances and Roaming Clients) and with conditional forwarding rules on local DNS servers externally forwarding to Cisco DNS.

3. monitoring Oct 02, 2026, 11:02 PM UTC

   We have implemented a partial workaround for the currently identified affected domains. Customers should begin seeing restored access to these domains. The underlying issue has not been fully resolved, and other Akamai-hosted domains may continue to return SERVFAIL responses. We are monitoring the effectiveness of this mitigation and continuing to work with Akamai toward a full resolution. Customers who continue to experience issues can use the previously provided workaround to bypass affected domains from Cisco DNS. Additional updates will be provided as new information becomes available.

4. resolved Oct 09, 2026, 08:43 PM UTC

   The issue affecting access to some Akamai-hosted domains through Cisco Umbrella has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience.

Read the full incident report →

Started Sep 21, 2026, 10:11 PM UTC· resolved Sep 21, 2026, 10:52 PM UTC

1. investigating Sep 21, 2026, 10:11 PM UTC

   We are investigating an issue where Oracle-related domains (including oracle.com) are currently being blocked in Umbrella after a recent update to the Gen AI application category. This appears related to an updated "AI database" application definition that is affecting multiple Oracle domains under Gen AI app controls. We have reverted the recent change and are closely monitoring web and DNS traffic to confirm full restoration of access for affected customers.

2. identified Sep 21, 2026, 10:31 PM UTC

   Access to Oracle-related domains through the Secure Web Gateway (SWG) has been restored. DNS access to these domains continues to experience issues. We have identified the issue and are working to restore full DNS access.

3. resolved Sep 21, 2026, 10:52 PM UTC

   Access to Oracle-related domains has been fully restored through both DNS and the Secure Web Gateway (SWG). We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Sep 16, 2026, 11:25 AM UTC· resolved Sep 16, 2026, 02:50 PM UTC

1. resolved Sep 16, 2026, 04:12 PM UTC

   Between approximately 11:25 and 14:50 UTC, customers using the Investigate dashboard and associated data retrieval APIs may have experienced 503 errors, unavailable graphs or data, and errors when retrieving logs or graph information. The issue has been resolved, and service has returned to normal.

Read the full incident report →

Started Aug 21, 2026, 05:07 PM UTC· resolved Aug 21, 2026, 07:00 PM UTC

1. investigating Aug 21, 2026, 05:07 PM UTC

   We are investigating a network issue causing delays when creating or updating policies in Cisco Umbrella in Johannesburg, South Africa. Customers may experience longer than expected propagation times for recent policy changes. Our engineering teams are working to restore normal policy update processing. We will provide another update as soon as more information is available.

2. investigating Aug 21, 2026, 05:12 PM UTC

   We are continuing to investigate the issue. Existing policies remain active. However, new or updated policy changes may take longer than expected to apply.

3. identified Aug 21, 2026, 06:27 PM UTC

   We have identified the issue and are applying mitigation. Existing policies remain active while recent policy changes may still be delayed.

4. identified Aug 21, 2026, 06:59 PM UTC

   Mitigation is underway, and we are seeing improvement. We will continue monitoring progress and provide another update as needed.

5. resolved Aug 21, 2026, 07:00 PM UTC

   The network issue affecting Cisco Umbrella policy update processing in Johannesburg, South Africa has been resolved. New and updated policy changes are now applying as expected. We’re Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Aug 20, 2026, 03:18 AM UTC· resolved Aug 20, 2026, 07:26 AM UTC

1. investigating Aug 20, 2026, 03:18 AM UTC

   We are investigating a potential issue with DNS service affecting customers connecting globally. Some Domains may be incorrectly categorised as DNS Tunneling VPN. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution.Updates and additional details will be provided as new information becomes available.

2. monitoring Aug 20, 2026, 04:29 AM UTC

   The team is actively monitoring the environment to validate service stability. We will provide a update once the incident has been fully resolved.

3. resolved Aug 20, 2026, 07:26 AM UTC

   The issue affecting incorrectly categorized DNS Tunneling VPN issue for some domains has been resolved. All services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We’re Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

Read the full incident report →

Started Aug 19, 2026, 07:49 AM UTC· resolved Aug 19, 2026, 04:20 PM UTC

1. investigating Aug 19, 2026, 07:49 AM UTC

   We are currently monitoring elevated capacity utilization at the Europe (France) data center. To maintain service quality, this location has been temporarily removed from rotation for new connections. Customers with existing connections will remain connected and can continue using the service without interruption. New connection attempts will be automatically redirected to the nearest available data center configured for your organization. Customers connecting using a location-specific address may receive a certificate warning. We recommend using the automatic selection address to ensure seamless connectivity. Our engineering team will continue to monitor capacity throughout the day and will provide further updates as more information becomes available. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

2. resolved Aug 19, 2026, 04:20 PM UTC

   The capacity condition affecting Europe (France) has been resolved. Cisco Secure Connect Remote Access client connections are operating normally. We’re Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Aug 17, 2026, 03:56 PM UTC· resolved Aug 20, 2026, 07:51 AM UTC

1. identified Aug 17, 2026, 03:56 PM UTC

   We have identified a connectivity issue affecting Cisco Secure Connect and Umbrella services in the Palo Alto data center. Customers whose traffic is routed through Palo Alto may be unable to establish new tunnels or pass traffic through existing tunnels. Cisco is actively implementing mitigation measures to restore service. We will provide further updates as more information becomes available.

2. identified Aug 17, 2026, 04:11 PM UTC

   We are continuing to work on a fix for this issue.

3. identified Aug 17, 2026, 04:13 PM UTC

   Cisco is actively working to mitigate the impact and restore traffic flow. We are continuing to investigate and will provide more information as it becomes available.

4. identified Aug 17, 2026, 05:25 PM UTC

   Cisco has taken the affected Palo Alto site out of rotation to mitigate impact for Cisco Secure Connect and Umbrella traffic. Customers whose traffic was routed through Palo Alto should be redirected to available sites. We are continuing to monitor traffic recovery while working with our infrastructure provider and will provide more information as it becomes available.

5. identified Aug 18, 2026, 04:21 PM UTC

   Recovery work is ongoing with our infrastructure provider to restore the affected connectivity path. We will share a restoration ETA as soon as one is available. We will provide further updates as more information becomes available.

6. identified Aug 20, 2026, 07:51 AM UTC

   We are continuing with the recovery work

7. resolved Aug 20, 2026, 07:51 AM UTC

   The connectivity issue in the Palo Alto data center is now resolved. All services are restored and the site is back in rotation. We have confirmed that traffic flow is stable. Thank you for your patience.

Read the full incident report →

Started Aug 15, 2026, 09:52 AM UTC· resolved Aug 19, 2026, 09:04 AM UTC

1. investigating Aug 15, 2026, 09:52 AM UTC

   We are currently investigating a connectivity issue originating from our infrastructure provider that may be affecting customers connecting through multiple data centers. Customers connecting through the following locations may experience intermittent connectivity issues or degraded traffic performance: Europe (Germany) Europe (Milan) Europe (Stockholm) India (West) India (South) Africa (South Africa) Our engineering team is actively working with our infrastructure provider to confirm the impact, identify the root cause, and implement a resolution. Updates and additional details will be provided as new information becomes available. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

2. monitoring Aug 15, 2026, 02:48 PM UTC

   All Cisco services are now fully operational and stable, with ongoing monitoring in place. We are waiting updates from our infrastructure provider.

3. monitoring Aug 15, 2026, 04:31 PM UTC

   Cisco has taken the affected sites out of rotation: Frankfurt, Amsterdam, Mumbai, Chennai, Cape Town, Milan, and Stockholm. Customers attempting to connect through these sites will be automatically redirected to other available sites. Customers that only have the affected sites provisioned are encouraged to provision additional sites to maintain connectivity. We are continuing to monitor and will provide more information as it becomes available.

4. monitoring Aug 16, 2026, 03:58 PM UTC

   Amsterdam, Mumbai, Chennai, Cape Town, Milan, and Stockholm are back in rotation. No customer action is required.

5. monitoring Aug 18, 2026, 01:11 AM UTC

   We are still working with our infrastructure provider on the EU/Frankfurt site intermittent connectivity issue. Customers with reporting data stored in the EU/Frankfurt data storage location may be unable to retrieve reporting data older than 30 days at this time. We are continuing to monitor and will provide more information as it becomes available.

6. resolved Aug 19, 2026, 09:04 AM UTC

   All services in Frankfurt and previously affected sites are now fully restored. Connectivity and reporting are back to normal. We sincerely appreciate your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

Read the full incident report →

Started Aug 15, 2026, 03:23 AM UTC· resolved Aug 15, 2026, 05:12 AM UTC

1. investigating Aug 15, 2026, 03:23 AM UTC

   We are currently investigating a potential network connectivity issue affecting customers connecting to the Europe (Germany) data center. Customers may have experienced intermittent service disruption, including brief connection interruptions or degraded traffic performance. Our engineering team is actively working to confirm the impact, identify the root cause, and implement a resolution. Updates and additional details will be provided as new information becomes available. Thank you for your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

2. investigating Aug 15, 2026, 03:50 AM UTC

   We are continuing to investigate a network connectivity issue affecting customers connecting to the Europe (Germany) data center. The specific impact for Secure Web Gateway (SWG) is delayed logging, but traffic is not impacted. Thank you for your patience and understanding.

3. investigating Aug 15, 2026, 03:59 AM UTC

   As part of our mitigation efforts, we are redirecting traffic from the affected data center to restore normal service for impacted customers. During this activity, customers may experience a brief interruption to their session. If your connection does not restore automatically, we kindly ask that you reconnect manually using Cisco Secure Client to be routed to a healthy location. We sincerely appreciate your patience and understanding.

4. resolved Aug 15, 2026, 05:12 AM UTC

   Traffic has been successfully redirected away from the affected data center, and all services have been stabilized as of 05:01 UTC. Customers should now experience normal service performance. If your connection has not restored automatically, we kindly ask that you reconnect manually using Cisco Secure Client to be routed to a healthy location. We sincerely appreciate your patience and understanding.

Read the full incident report →

Started Aug 14, 2026, 05:16 PM UTC· resolved Aug 14, 2026, 05:26 PM UTC

1. investigating Aug 14, 2026, 05:16 PM UTC

   We are investigating an issue where Cisco Umbrella customers globally may be unable to download Cisco Secure Client from the dashboard. Existing Cisco Secure Client users and customer traffic are not impacted. Engineering is investigating, and we will provide an update as more information becomes available.

2. resolved Aug 14, 2026, 05:26 PM UTC

   This issue has been resolved. Cisco Umbrella customers are now able to download Cisco Secure Client from the dashboard. We're Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Aug 12, 2026, 11:52 AM UTC· resolved Aug 12, 2026, 12:12 PM UTC

1. resolved Aug 12, 2026, 12:33 PM UTC

   Between approximately 11:52 UTC and 12:12 UTC on August 12, 2026, customers connecting through the India (Mumbai) data center may have experienced a brief network disruption. During this period, some customers may have experienced disconnections, reduced traffic throughput, or difficulty establishing new connections. Service was restored as of 12:12 UTC, and all services are now operating normally. We apologize for any inconvenience caused and thank you for your patience. We're Here to Help If you continue to experience issues, please contact Cisco Support.

Read the full incident report →

Started Aug 05, 2026, 11:59 AM UTC· resolved Aug 05, 2026, 04:53 PM UTC

1. investigating Aug 05, 2026, 11:59 AM UTC

   We are currently investigating an issue affecting the provisioning of new resiliency regions for the Cisco Secure Connect platform across all data centers. As a result, customers may be unable to provision new resiliency regions at this time, current connectivity should not be impacted. Our engineering team is actively working to identify the root cause and restore full functionality as quickly as possible. Updates and additional details will be provided as new information becomes available. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

2. identified Aug 05, 2026, 04:36 PM UTC

   We have identified an issue affecting a subset of Cisco Secure Connect services and have started mitigation steps to reduce the overall impact. Affected customers may continue to experience intermittent failures with new resiliency region provisioning and some clientless access workflows. Existing established connectivity is not expected to be broadly impacted. Our engineering teams are continuing to investigate the root cause while mitigation work is in progress. Updates and additional details will be provided as new information becomes available.

3. resolved Aug 05, 2026, 04:53 PM UTC

   This issue has been resolved. Cisco Secure Connect resiliency region provisioning has returned to normal, and customers should no longer experience issues provisioning new resiliency regions. Current connectivity was not expected to be impacted during this incident. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

Read the full incident report →

Started Aug 04, 2026, 07:50 PM UTC· resolved Aug 04, 2026, 08:17 PM UTC

1. investigating Aug 04, 2026, 07:50 PM UTC

   Affected customers using Cisco Umbrella Cloud Delivered Firewall through Singapore may experience policy enforcement failures for new traffic or new users that require fresh user identity validation. New tunnels are expected to establish successfully. However, traffic from users behind those tunnels may be blocked if Umbrella cannot obtain the required user identity context for policy evaluation. Existing authenticated sessions and established traffic flows are not expected to be impacted unless they require new identity validation.

2. resolved Aug 04, 2026, 08:17 PM UTC

   The issue affecting Cisco Umbrella Cloud Delivered Firewall policy enforcement in Singapore has been resolved. Services have returned to normal operation. We’re Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Jul 31, 2026, 06:08 PM UTC· resolved Jul 31, 2026, 07:51 PM UTC

1. investigating Jul 31, 2026, 06:08 PM UTC

   We are investigating a third-party cloud provider network issue affecting Cisco Secure Connect services in the India region. Customers connecting through the Mumbai and Chennai locations may experience connectivity issues or service degradation for some Secure Connect services, including private access functionality. To mitigate impact, traffic is being rerouted to alternate locations where available, and affected services in Mumbai and Chennai have been taken out of rotation. Customers reconnecting should use the Any Location connect feature so traffic can be routed to an available location. Connections that continue to use the impacted Chennai or Mumbai locations may continue to fail. Our engineering teams are actively investigating and working with the provider to restore normal service. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

2. identified Jul 31, 2026, 07:12 PM UTC

   The underlying Direct Connect issue in the AP South region has been resolved. Cisco engineering teams are validating service stability and preparing to return the affected Mumbai and Chennai services to normal operation. Until this validation is complete, customers reconnecting should continue to use the Any Location connect feature so traffic can be routed to an available location. Updates and additional details will be provided as new information becomes available.

3. resolved Jul 31, 2026, 07:51 PM UTC

   This issue has been resolved. Cisco Secure Connect Remote Access Client connectivity through the Mumbai and Chennai locations has been restored, and the affected services have returned to normal operation. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

Read the full incident report →

Started Jul 31, 2026, 03:21 PM UTC· resolved Jul 31, 2026, 09:23 PM UTC

1. investigating Jul 31, 2026, 03:21 PM UTC

   We are investigating an issue affecting a subset of Cisco Secure Connect customers associated with the Frankfurt and London data centers. Affected customers may be unable to create new connections or complete new customer onboarding. Existing connected users are expected to continue using the service without disruption. The impact is limited to new connection provisioning for customers associated with the affected head ends. We are working to restore normal provisioning and will provide the next update as more information becomes available.

2. investigating Jul 31, 2026, 03:23 PM UTC

   We are continuing to investigate this issue.

3. identified Jul 31, 2026, 03:57 PM UTC

   We have identified certificate provisioning timeouts related to the new connection provisioning impact. We are working to restore normal provisioning and will provide the next update as progress is made.

4. identified Jul 31, 2026, 04:07 PM UTC

   Certificate provisioning is recovering, and provisioning requests are being processed. A backlog remains, and pending or new connection provisioning and customer onboarding requests may be delayed. We are monitoring processing and will provide the next update once normal provisioning timelines have been confirmed.

5. identified Jul 31, 2026, 04:42 PM UTC

   Copenhagen is also experiencing delays for pending and new connection or onboarding requests due to the certificate provisioning backlog.

6. identified Jul 31, 2026, 06:22 PM UTC

   Certificate provisioning recovery remains in progress. Pending and new connection provisioning or customer onboarding requests may still be delayed while the backlog is being worked through.

7. resolved Jul 31, 2026, 09:23 PM UTC

   Certificate provisioning has returned to normal processing, and new connection provisioning and onboarding requests are completing successfully. We’re Here to Help If you have any questions or need assistance, please contact our support team.

Read the full incident report →

Started Jul 25, 2026, 02:54 PM UTC· resolved Jul 25, 2026, 09:09 PM UTC

1. investigating Jul 25, 2026, 02:54 PM UTC

   We are investigating an issue affecting Cisco Umbrella customers with DNS policies configured to block the "M365 Copilot" and "Microsoft Copilot" application categories. Affected customers may experience access issues with some Microsoft 365 services, including Outlook and Office applications, where related Microsoft hostnames may be matched to these Copilot application categories and blocked by policy. As a workaround, customers experiencing this issue can temporarily remove or allow the "M365 Copilot" and "Microsoft Copilot" application category blocks in their DNS policy. Customers should review any policy changes against their organization’s security requirements. Our engineering teams are actively investigating. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

2. identified Jul 25, 2026, 04:48 PM UTC

   We have identified the issue and are currently mitigating the impact. The previously provided workaround remains available for customers experiencing access issues with Microsoft 365 services. Customers may temporarily remove or allow the "M365 Copilot" and "Microsoft Copilot" application category blocks in their DNS policy, after reviewing the change against their organization’s security requirements. Updates and additional details will be provided as new information becomes available.

3. resolved Jul 25, 2026, 09:09 PM UTC

   This issue has been resolved. Cisco Umbrella customers with DNS policies configured to block the "M365 Copilot" or "Microsoft Copilot" application categories should no longer experience related access issues with Microsoft 365 services. Customers who applied the previously provided workaround can review and restore their DNS policy settings as appropriate for their organization’s security requirements. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

Read the full incident report →