Major incident

Cloud Security: [Cisco Umbrella] - Intermittent Service Degradation - Global

Affected: API, Dashboard

Current status of Cloud Security: Operational — live Cloud Security status

Timeline

1. Jul 15, 2026, 15:32 UTC
   identified
   Customers may experience issues with the Umbrella Dashboard, policy processing, policy updates, configuration changes, and DLP Core connectivity. Existing configurations remain in place, and ongoing traffic processing is not expected to be impacted unless it requires the affected policy processing.
2. Jul 15, 2026, 15:46 UTC
   identified
   In addition to the previously communicated impact, customers using SCIM provisioning from Microsoft Entra ID (Azure AD), Okta, or Duo may experience failures synchronizing users and groups to Umbrella. As a result, new users, group membership changes, and identity updates will not be reflected until synchronization is restored. Existing policies and traffic enforcement for previously synchronized identities are not expected to be affected. Customers may also experience delays in DLP policy propagation and DLP reporting event processing. No data is lost; however, DLP policy changes may take longer than usual to be reflected in scan operations, and reporting events may be delayed in the Dashboard and log exports.
3. Jul 15, 2026, 17:54 UTC
   monitoring
   Mitigation actions have been completed, and the affected Umbrella services are recovering. Policy processing, policy updates, configuration changes, SCIM provisioning, DLP policy propagation, and DLP reporting event processing are returning to normal operation. We are continuing to monitor service stability to ensure a full recovery.
4. Jul 15, 2026, 18:09 UTC
   resolved
   Mitigation actions have been completed, and Umbrella services are operating normally. We're Here to Help If you have any questions or need assistance, please contact our support team.

Updates as published by Cloud Security (original).