Zscaler.net

Recent Incidents

Zscaler provides transparency around service availability and changes to our customers. Please refer to Zscaler’s service continuity customer notification policy for details.

April 2018

  • Incident:
    Resolved
    Dallas Data Center Issue

    We are investigating an issue with our Dallas data center. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: The incident has been resolved as of 17:16 UTC. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Data Center Issue

    We are investigating an issue with traffic processing on our cloud. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: 4/13/2018 11:09:18 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Data Center Issue

    We are investigating an issue with our Tianjin data center. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: 4/12/2018 6:23:19 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Administration UI and User Authentication Issues

    Zscaler operations encountered an issue with the administration UI and user authentication, during which the administration UI was unavailable. All organizations’ policies were enforced and transaction logs recorded during the incident window. The issue is resolved. Please contact Zscaler Support if you have additional questions.


    Incident Start time is Apr 4, 13:22 PDT (Apr 4, 20:22 UTC)
    Incident End time is  Apr 4, 14:10 PM PDT (Apr 4, 21:10 UTC)

March 2018

  • Incident:
    Resolved
    Reporting and Logging

    We are investigating an issue with Reporting and Logging. Your organization’s policies are being enforced. All user logs are being collected and will be available at the resolution of this incident. We will post additional information on this incident as it is available.

    Update: 4/4/2018 7:39:37 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Shanghai Data Center Issue

    We are investigating an issue with our Shanghai data center. Traffic has been re-routed to the next closest datacenter while we investigate. We will post additional information on this incident as it is available.

    Update: 3/28/2018 2:27:37 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Sydney Data Center Issue

    We are investigating an issue with our Sydney data center. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: 3/22/2018 9:09:00 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Melbourne Data Center Issue

    We are investigating an issue with our Melbourne data center. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: 3/22/2018 9:09:00 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    SAML Authentication Bypass Vulnerability

    On February 27, 2018, Duo Security released a security advisory detailing a new vulnerability class affecting Security Assertion Markup Language (SAML) based single sign-on (SSO) systems. Due to the way that certain implementations parse SAML Responses, it may be possible for a user with authenticated access to authenticate as an alternate user without knowing their password. This discovery has resulted in numerous SAML libraries and solutions implementing the libraries to be exposed to privilege escalation attacks. 

    Zscaler has completed an assessment of all systems and has determined that Zscaler Internet Access (ZIA) is not vulnerable. Zscaler Private Access(ZPA) is potentially vulnerable in very specific circumstances. The ZPA enrollment service is not vulnerable and an attack could not therefore lead to a multi-tenancy attack whereby one user could gain access to the account of a user in a separate company. The ZPA vulnerability is limited to the broker service and is therefore restricted to a user potentially accessing the account of another user within the same company, but only for active directory groups/assertions whose identifier is a prefix of another active directory group/assertion owned by the attacker. Zscaler has already developed a patch to address this situation and will release it as soon as QA testing has been completed

February 2018

  • Incident:
    Resolved
    VPN Traffic

    Zscaler is investigating issues with VPN traffic processing. All organizations’ policies were enforced and transaction logs recorded.We will post additional information on this incident as it is available.

    Update: 2/14/2018 4:35:01 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Reflected XSS vulnerability in Trust Portal

    A reflected XSS vulnerability was recently identified on the Zscaler Trust Portal (Trust.Zscaler.com). The Zscaler Trust Portal is a publicly accessible website and does not host sensitive information. Zscaler would like to thank Pankaj Rane for responsibly disclosing the vulnerability and working with us to ensure that it was properly patched in a timely manner. 

  • Incident:
    Resolved
    Sydney Data Center Issue

    We are investigating an issue with our Sydney data center. Traffic has been re-routed to the next closest datacenter while we investigate. We will post additional information on this incident as it is available.

    Update: 2/12/2018 23:36:13 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Traffic Processing

    We are investigating an issue with traffic processing on our cloud. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: 2/8/2018 14:46:08 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

     

  • Incident:
    Resolved
    Reporting and Logging

    We are investigating an issue with Reporting and Logging on our zscaler.net cloud. Your organization’s policies are being enforced. All user logs are being collected and will be available at the resolution of this incident. We will post additional information on this incident as it is available.

    Update: 2/3/2018 6:06:22 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

January 2018

  • Incident:
    Resolved
    London III Data Center Issue

    We are investigating an issue with our London III data center. We are investigating periods of slowness and/or increased latency. We will post additional information on this incident as it is available.

    Update: 1/31/2018 16:31:32 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Sao Paulo Data Center Issue

     

    We are investigating an issue with our Sao Paulo data center. Traffic has been re-routed to the next closest datacenter while we investigate. We will post additional information on this incident as it is available.

    Update: 1/20/2018 7:14:16 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.

  • Incident:
    Resolved
    Traffic impacted for Customers using CISCO IPSLA

    We are investigating an issue with traffic processing for our customers using CISCO IP SLA. Your organization’s policies are being enforced. All user logs are being collected and will be available at the resolution of this incident. We will post additional information on this incident as it is available.

     

    Update: 1/12/2018 15:26:22 UTC - This incident has been resolved. Please contact Zscaler Support if you have additional questions.​

  • Incident:
    Resolved
    Administration UI and User Authentication Issues

    We are investigating an issue with the administration UI on our zscaler.net cloud. Your organization’s policies are being enforced. All user logs are being collected and will be available at the resolution of this incident. We will post additional information on this incident as it is available.

    ​Update: 1/9/2018 5:26:16 UTC - The issue is resolved. Please contact Zscaler Support if you have additional questions.
     

  • Incident:
    Resolved
    San Francisco IV Data Center Issue

    We are investigating an issue with our San Francisco IV data center. Your organization’s policies are being enforced. All user logs are being collected and will be available at the resolution of this incident. We will post additional information on this incident as it is available.

  • Incident:
    Resolved
    San Jose Data Center Issue

    We are investigating an issue with our San Jose data center. Your organization’s policies are being enforced. All user logs are being collected and will be available at the resolution of this incident. We will post additional information on this incident as it is available.