FortiAppSec Cloud incident

Connectivity Issues with Load Balancer Node in Azure - EU West

Major Resolved View vendor source →

FortiAppSec Cloud experienced a major incident on September 30, 2025 affecting WAF Scrubbing Region - Azure - EU West (Netherlands), lasting 1d. The incident has been resolved; the full update timeline is below.

Started
Sep 30, 2025, 05:26 PM UTC
Resolved
Oct 01, 2025, 05:57 PM UTC
Duration
1d
Detected by Pingoru
Sep 30, 2025, 05:26 PM UTC

Affected components

WAF Scrubbing Region - Azure - EU West (Netherlands)

Update timeline

  1. investigating Sep 30, 2025, 05:26 PM UTC

    We are currently investigating an issue causing abnormal connection terminations for services in the Azure - EU West region. Impact: The issue appears to be limited to a small number of sites that use an A-record to point directly to the 20.50.222.94 and 20.54.176.184 IP address due to LB connectivity issue. Current Status: Our engineering teams are restored LB connectivity becomes available and actively keep monitoring. Immediate Recommendation: For affected customers, we recommend temporarily adding the A-record pointing to **20.107.95.65, 20.107.95.95 AND 65.52.150.132** from your DNS configuration to mitigate the impact. Please keep the existing A-record IPs (20.50.222.94, 20.54.176.184) in place while adding the new ones. This approach ensures service continuity during the transition. If possible, we also recommend using a CNAME record instead of an A-record, which provides greater flexibility in handling future changes.

  2. investigating Sep 30, 2025, 06:10 PM UTC

    We are continuing to investigate this issue.

  3. monitoring Sep 30, 2025, 07:09 PM UTC

    The LB connection has been restored. Our investigation confirms this is related to Azure network instability, with severe packet loss observed. We are urgently engaging with Azure technical support while continuing to monitor the situation closely.

  4. resolved Oct 01, 2025, 05:57 PM UTC

    The LB connectivity traffic has been restored. Action Recommendation: For customers **who added the A-record with temporary LB IPs (20.107.95.65, 20.107.95.95 AND 65.52.150.132)**, these addresses will continue to be available for the next 48 hours, we kindly recommend updating your DNS A-records pointing back to **20.50.222.94 and 20.54.176.184** at your earliest convenience to ensure uninterrupted service. If possible, we also recommend using a CNAME record instead of an A-record, which provides greater flexibility.