[Cisco Umbrella] - Intermittent Service Degradation - Global

Incident Report for Cloud Security Service Status

Resolved

Mitigation actions have been completed, and Umbrella services are operating normally.

We're Here to Help
If you have any questions or need assistance, please contact our support team.
Posted Jul 15, 2026 - 18:09 UTC

Monitoring

Mitigation actions have been completed, and the affected Umbrella services are recovering. Policy processing, policy updates, configuration changes, SCIM provisioning, DLP policy propagation, and DLP reporting event processing are returning to normal operation.

We are continuing to monitor service stability to ensure a full recovery.
Posted Jul 15, 2026 - 17:54 UTC

Update

In addition to the previously communicated impact, customers using SCIM provisioning from Microsoft Entra ID (Azure AD), Okta, or Duo may experience failures synchronizing users and groups to Umbrella. As a result, new users, group membership changes, and identity updates will not be reflected until synchronization is restored. Existing policies and traffic enforcement for previously synchronized identities are not expected to be affected.

Customers may also experience delays in DLP policy propagation and DLP reporting event processing. No data is lost; however, DLP policy changes may take longer than usual to be reflected in scan operations, and reporting events may be delayed in the Dashboard and log exports.
Posted Jul 15, 2026 - 15:46 UTC

Identified

Customers may experience issues with the Umbrella Dashboard, policy processing, policy updates, configuration changes, and DLP Core connectivity. Existing configurations remain in place, and ongoing traffic processing is not expected to be impacted unless it requires the affected policy processing.
Posted Jul 15, 2026 - 15:32 UTC
This incident affected: Umbrella Global (API, Dashboard).