Forcepoint ONE Outage History

Customer Impact: SSE SWG, CASB and RBI customers may not be able to view data in Transaction Viewer and Dashboard in Insights. Description: We are currently experiencing an underlying infrastructure problem which is impacting visibility of data in Transaction viewer and Dashboard on Insights. We are investigating the problem and will provide further update as we make progress. Next update time: 12:30 UTC

Customer Impact: FONE Customers may not be able to access FONE SSE Portal and managed applications via reverse proxy. Description: We are currently experiencing a problem which is impacting access to the FONE SSE Portal and customer's ability to access managed applications via reverse proxy. Our team is currently investigating the problem and we will provide further feedback as we make progress. Next update time: 09:30 UTC

Customer Impact: FONE Customers may not be able to access FONE SSE Portal and managed applications via reverse proxy. Description: We continue to investigate the problem, and we will provide further updates as we make progress. Next update time: 10:00 UTC

Description: We are currently experiencing a problem with one of our malware sandboxing provider which is causing .pdf files to be considered as malicious, generating a high-volume of false positive alerts for our customers. Our vendor has acknowledged the problem and is working on a resolution at the earliest. Customer Impact: The incident impacts Cloud & On-prem Web, On-prem Email and NGFW customers who have an active AMDP Cloud subscription. Customers may notice a high-volume of false positive alerts being generated due to sandboxing categorising .pdf files as malicious and may not be able to download the .pdf files falsely identified as malicious.

Customer Impact: Some of our on-prem Email security customers may experience email delivery delays due to Advanced Malware Detection and Prevention malware analysis delays. The impact is restricted to on-prem email customers who leverage AMDP cloud. Email Security Cloud customers are not impacted due to this incident. Description: We are currently experiencing a problem which is impacting delivery of emails for on-prem email security customers. We are investigating the problem and will provide further feedback as we make progress. Next update time: 04:00 UTC

Customer Impact: Some of our on-prem Email security customers may experience email delivery delays (for emails with an attachment) due to Advanced Malware Detection and Prevention malware analysis delays. The impact is restricted to on-prem email customers who leverage AMDP cloud in EMEA region. Email Security Cloud customers are not impacted due to this incident. Description: We have identified the problem to be related to one of our malware sandboxing providers which is experiencing service degradation. We are working with our vendor for a resolution at the earliest. Next update time: 06:00 UTC

Customer Impact: RBI services are currently un-available in Bahrain (me-south-1) region. Our automated load balancing mechanism has re-routed traffic to an alternate cluster to ensure continuity of services. Description: We are currently experiencing problem with our RBI data-plane in Bahrain region. Traffic has automatically been re-routed to another region while we work on remediating the problem. Next update time: 08:00 AM UTC

We are continuing to investigate this issue.

Customer Impact: RBI services are currently un-available in Bahrain (me-south-1) region. Our automated load balancing mechanism has re-routed traffic to an alternate cluster to ensure continuity of services. Description: : We continue to investigate the root cause for RBI services in Bahrain (me-south-1) region and will provide further updates as we make progress. Next update time: 09:30 AM UTC

Customer Impact: RBI services are currently un-available in Bahrain (me-south-1) region. Our automated load balancing mechanism has re-routed traffic to an alternate cluster to ensure continuity of services. Description: : We continue to investigate the root cause for RBI services in Bahrain (me-south-1) region and will provide further updates as we make progress. Next update time: 10:30 AM UTC

Customer Impact: Some cloud web security customers might be blocked from accessing Microsoft related web pages due to a categorization issue. This incident is unrelated to the ongoing root CA certificate update. Description: We have identified a categorization problem impacting access to Microsoft web pages. We are investigating further and will provide updates once we have more information available. Next update time: 10:26 AM

Customer Impact: RBI services are currently un-available in Ashburn (us-east-1) region. Our automated load balancing mechanism has re-routed traffic to an alternate cluster to ensure continuity of services. Description: We are currently experiencing problem with our RBI data-plane in Ashburn region. Traffic has automatically been re-routed to another region while we work on remediating the problem. Next update time: 09:00 AM UTC

Customer Impact: Some of our AMDP customers may observe errors or time-outs with submitting files for sandboxing with our AMDP solution. Description: We are experiencing a problem with our AMDP solution due to a degradation in one of our Malware Sandboxing service providers which are causing submissions to the vendor for malware sandboxing analysis to fail. We are working with our vendor to restore the service at the earliest. Next Update: 17:30 UTC

Customer Impact: Some customers in ap-southeast-1 (Singapore) and ap-southeast-2 (Sydney) regions may experience intermittent increase in latency while accessing managed applications. Description: We are currently investigating a problem impacting SSE SWG and CASB services. We will provide further update as we make progress with the remediation measures. Next update time: 03:30 AM UTC

Customer Impact: Some customers in ap-southeast-1 (Singapore) and ap-southeast-2 (Sydney) regions may experience intermittent increase in latency while accessing managed applications. Description: We continue to investigate the root cause and have performed certain remediations which has helped restore the health of forward proxy service. We continue to see intermittent spikes in latency while accessing managed applications via reverse proxy which is being thoroughly investigated. Next update time: 05:00 AM UTC

Customer Impact: Some customers in ap-southeast-1 (Singapore) and ap-southeast-2 (Sydney) regions may experience intermittent increase in latency while accessing managed applications. Description: We continue to investigate the root cause and will provide further updates as we make progress. Next update time: 05:30 AM UTC

Customer Impact: Some customers in ap-southeast-1 (Singapore) and ap-southeast-2 (Sydney) regions may experience intermittent increase in latency while accessing managed applications. Description: We are currently investigating a problem impacting SSE SWG and CASB services. We will provide further update as we make progress with the remediation measures.

Customer Impact: Some of our web security cloud customers may experience increased latency on an intermittent basis while accessing the internet from São Paulo. Description: We are currently experiencing degraded performance in São Paulo. We are investigating the incident and will provide an update as we make progress. Next update time: 14:00 UTC

Customer Impact: Cloud Security Portal customers may be unable to view Cloud Portal Dashboard reports or encounter errors when attempting to use the Cloud Reporting Service. Description: We are currently experiencing degraded performance with Cloud Portal. We are investigating the problem and will provide further update as make progress. Next update time: 1500 UTC

Customer Impact: Cloud Security Portal was un-available between 01:40 PM UTC to 01:54 PM UTC. Description: Access to the Portal has recovered and we are monitoring the service for stability.

Customer Impact: Web Security cloud customers may have observed a brief loss of connectivity. Description: We are currently experiencing degraded performance in Cluster yyza (toronto). We are investigating the problem and will provide further update as make progress. Next update time: 10:30AM UTC

Customer Impact: Web Security cloud customers may have observed a brief loss of connectivity (under 2 minutes) until traffic automatically failed over to redundant data center. Description: We are currently experiencing degraded performance in Cluster YYZA (Toronto). We are investigating the problem and will provide further update as make progress. Next update time: 10:30AM UTC

Customer Impact: Forcepoint customers should not have observed an impact as the Web Security traffic has automatically been failed over to alternate datacenter . Description: We are currently investigating a degradation in Paris Cluster (Cluster D). Team is troubleshooting the issue and will provide further update as make progress.

Customer Impact: Web Security Cloud customers may have observed an intermittent loss of connectivity to the web. Description: We are currently experiencing a network reachability issue in Sao Paolo which is causing intermittent loss of connectivity to services hosted in Sao Paolo. We have re-routed traffic to an alternate data center to ensure continuity of services for customers while we investigate the problem. Next update time: 21:30 UTC

Customer Impact: Web Security Cloud customers may observe increased latency when connecting to our Toronto (Cluster YYZA) data center. Description: We are currently experiencing performance issues in Toronto (Cluster YYZA). We are investigating the problem and will provide further updates as we make progress.

Customer Impact: Web Security Cloud customers may observe an increase in latency when connecting to our Heathrow (Cluster A) datacenter. Description: We are currently experiencing performance issues in Heathrow (Cluster A). We are investigating the problem and will provide further update as make progress.

Impact: Customers connecting to vPoPs configured in Singapore data center may observe a loss of localization while accessing the Web. Description: We have identified a problem in Singapore data center which has impacted accessibility of vPoPs configured in Singapore. Traffic from the below vPoPs have automatically rerouted to an alternate data center while we troubleshoot the problem. The incident is only impacting vPOP services.