Get webhook notifications whenever Palo Alto Networks Cloud Services creates an incident, updates an incident, resolves an incident or changes a component status.
Update - We are continuing to monitor for any further issues.
Apr 02, 2026 - 18:05 UTC
Update - We are continuing to monitor for any further issues.
Mar 03, 2026 - 19:06 UTC
Update - We are continuing to monitor for any further issues.
Mar 03, 2026 - 03:10 UTC
Monitoring - AWS Middle East(Bahrain) outage impacting Cloud NGFW Services. We are aware of power outage in AWS Bahrain region. We are evaluating the impact on Cloud NGFW services in this region. Customers may experience failures to deploy new resources in this region. Ongoing Actions: Our engineering team is monitoring the provider’s recovery efforts and is prepared to validate service health as soon as infrastructure stabilizes. You can also monitor the underlying platform status via the AWS Status Page: https://health.aws.amazon.com/health/status?path=service-history Next Update: 5:00PM 3/03/2026 UTC.
Mar 02, 2026 - 22:49 UTC
We are planning a service maintenance for Cortex XDR / XSIAM / XSOAR 8 / XPANSE / CLOUD in America, Canada, Singapore, Indonesia, India, Australia, Taiwan, Korea, South Africa and Japan region. The maintenance is scheduled for May 31st from 6:00AM UTC to 2:00PM UTC. During this window, the service may be unavailable for a maximum of 60 minutes. However, if you are experiencing unusual activity in your environment, please contact our Support - https://www.paloaltonetworks.com/company/contact-support. Posted on
Apr 15, 2026 - 08:23 UTC
We are planning a service maintenance for Cortex XDR / XSIAM / XSOAR 8 / XPANSE / CLOUD in Europe, Germany, Switzerland, Poland, Qatar, Israel, France, Saudi Arabia, Spain, Italy and United Kingdom regions. The maintenance is scheduled for May 31st from 11:00AM UTC to 8:00PM UTC. During this window, the service may be unavailable for a maximum of 60 minutes. However, if you are experiencing unusual activity in your environment, please contact our Support - https://www.paloaltonetworks.com/company/contact-support. Posted on
Apr 15, 2026 - 08:24 UTC
We are planning a service maintenance for Cortex XDR / XSIAM / XSOAR 8 / XPANSE / CLOUD in America Government region. The maintenance is scheduled for June 7th from 2:00AM UTC to 10:00AM UTC. During this window, the service may be unavailable for a maximum of 60 minutes. However, if you are experiencing unusual activity in your environment, please contact our Support - https://www.paloaltonetworks.com/company/contact-support. Posted on
Apr 15, 2026 - 16:44 UTC
We have a planned upgrade for Prisma Cloud Compute to Quinn update 4 hotfix 2 in the following regions, scheduled for June 7, 2026 from 07:00 UTC to 11:00 UTC.
Customers may experience intermittent failures in the Compute feature set during this scheduled maintenance. No other Prisma Cloud Services will be affected.
Completed -
The scheduled maintenance has been completed.
May 27, 17:20 UTC
Verifying -
Verification is currently underway for the maintenance items.
May 27, 17:14 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 27, 16:00 UTC
Scheduled -
We have scheduled maintenance for the File Manager (FileMgr) in Singapore and India regions. This is set for May 27, 2026, from 16:00 to 18:00 UTC. Customers may encounter intermittent disconnections during this window.
May 26, 21:56 UTC
Completed -
The scheduled maintenance has been completed.
May 23, 03:16 UTC
Verifying -
Verification is currently underway for the maintenance items.
May 23, 03:10 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 23, 02:30 UTC
Scheduled -
We have scheduled maintenance for the File Manager (FileMgr) in the all regions. This is set for May 23, 2026, from 02:30 to 04:30 UTC. Some customers may encounter intermittent disconnections during this window.
May 19, 03:33 UTC
Completed -
The scheduled maintenance has been completed.
May 23, 01:00 UTC
Verifying -
Verification is currently underway for the maintenance items.
May 17, 13:15 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 16, 16:00 UTC
Update -
We will be undergoing scheduled maintenance during this time.
May 13, 17:32 UTC
Scheduled -
IAM Service Upgrade — Saturday, May 16
We are upgrading the IAM Service to a new architecture to improve reliability and scalability.
What to Expect: Available: Login and all non-IAM operations. Unavailable: IAM write operations — including creating or updating access policies and Tenant Service Group (TSG) creation/updates. Read-only IAM access is unaffected. Only administrative changes to policies and TSGs will be blocked during the window.
Recommended Action: Please complete any pending IAM policy or TSG changes before the maintenance window begins. Normal access will resume automatically once the upgrade is complete.
Completed -
The scheduled maintenance has been completed.
May 22, 22:08 UTC
Verifying -
Verification is currently underway for the maintenance items.
May 22, 21:52 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 22, 21:00 UTC
Scheduled -
We have scheduled maintenance for the File Manager (FileMgr) in the Germany, United Kingdom, Canada, and Brazil regions. This is set for May 22, 2026, from 21:00 to 23:00 UTC. Some customers may encounter intermittent disconnections during this window.
May 21, 05:33 UTC
Resolved -
Issue Description On May 21, 2026, customers reported their traffic being blocked due to TID 97011: “D-Link Router DHCP Hostname Command Injection Vulnerability”, the TID was designed to block OS Command Injection attempts within the hostname fields of DHCP requests. However, the signature included a broad command-matching filter that led to false positives across customer environments, as it incorrectly triggered on legitimate hostnames containing overlapping character strings. Findings and Technical Analysis The D-Link Router DHCP Hostname Command Injection Vulnerability (TID 97011) is an OS command injection flaw that allows command execution attempts through the DHCP Hostname fields. This vulnerability has coverage related to CVE-2025-69542 and CVE-2025-14659, such as the DIR-895LA1 which targets D-Link devices and DIR-860LB1, respectively. Previous Detection Logic The initial detection logic for TID 97011 included a command-filtering string within DHCP hostname fields that lacked strict boundary delimiters Root Cause The false positive (FP) occurred because the signature's command-validation logic triggered against legitimate hostnames containing the targeted command string as a substring. This broad matching behavior resulted in unintended traffic disruptions for multiple customers. Proposed Solutions & Mitigation We improved the signature logic to make it more resilient against false positives. The updated signature has been released with content 9105-10068.
May 22, 21:30 UTC
Completed -
The scheduled maintenance has been completed.
May 22, 17:11 UTC
Verifying -
Verification is currently underway for the maintenance items.
May 22, 17:02 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 22, 16:00 UTC
Scheduled -
We have scheduled maintenance for the File Manager (FileMgr) in the Australia, Singapore, and India regions. This is set for May 22, 2026, from 16:00 to 18:00 UTC. Some customers may encounter intermittent disconnections during this window.
May 21, 05:22 UTC
Completed -
The scheduled maintenance has been completed.
May 17, 19:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 17, 11:00 UTC
Update -
We will be undergoing scheduled maintenance during this time.
May 3, 12:04 UTC
Scheduled -
We are planning a service maintenance for Cortex XDR / XSIAM / XSOAR 8 / XPANSE / CLOUD in Europe, Germany, Switzerland, Poland, Qatar, Israel, France, Saudi Arabia, Spain, Italy and United Kingdom regions. The maintenance is scheduled for May 17th from 11AM UTC to 7:00PM UTC. During this window, the service may be unavailable for a maximum of 60 minutes. However, if you are experiencing unusual activity in your environment, please contact our Support - https://www.paloaltonetworks.com/company/contact-support.
Apr 15, 07:14 UTC
Completed -
The scheduled maintenance has been completed.
May 17, 14:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 17, 06:00 UTC
Update -
We will be undergoing scheduled maintenance during this time.
Apr 15, 07:22 UTC
Scheduled -
We are planning a service maintenance for Cortex XDR / XSIAM / XSOAR 8 / XPANSE / CLOUD in America, Canada, Singapore, Indonesia, India, Australia, Taiwan, Korea, South Africa and Japan region. The maintenance is scheduled for May 17th from 6:00AM UTC to 2:00PM UTC. During this window, the service may be unavailable for a maximum of 60 minutes. However, if you are experiencing unusual activity in your environment, please contact our Support - https://www.paloaltonetworks.com/company/contact-support.
Apr 15, 07:20 UTC
Completed -
The scheduled maintenance has been completed.
May 16, 04:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 15, 23:00 UTC
Scheduled -
WHAT: IoT Security (United States) plans to carry on an upgrade maintenance on AWS EKS service, which hosts the IoT Security product.
WHEN: Friday, May 15 | 4:00 PM PDT - May 15 | 9:00 PM PDT
WHERE: United States
NO ACTION REQUIRED
IMPACT: Some customer may notice data delay in IoT pipeline. Please ignore firewall data offline alerts during the maintenance.
SUPPORT: We will provide status updates before and throughout the maintenance. If you have any questions or concerns, feel free to reach out to IoT Security technical support at iot-security@paloaltonetworks.com.
May 14, 16:36 UTC
Completed -
The scheduled maintenance has been completed.
May 13, 23:30 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 13, 22:30 UTC
Scheduled -
We have a scheduled maintenance for Cloud User-ID (CUID) in Americas and Europe regions. The maintenance is scheduled for May 13th 2026 from 22:30 to 23:30 UTC. Customers may encounter intermittent disconnections during the maintenance window.
May 13, 22:27 UTC
Completed -
The scheduled maintenance has been completed.
May 13, 21:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 13, 20:00 UTC
Scheduled -
We have a scheduled maintenance for FileMgr in Germany Region on May 13th from 20:00 to 21:00 UTC. Customers may encounter intermittent disconnections during the maintenance window.
May 13, 19:29 UTC
Completed -
The scheduled maintenance has been completed.
May 13, 19:00 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 13, 17:00 UTC
Scheduled -
Performing Emergency maintenance in Australia Regions. Customers may encounter intermittent disconnections during the maintenance window.
May 13, 15:31 UTC
Completed -
The scheduled maintenance has been completed.
May 13, 18:18 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 13, 17:18 UTC
Scheduled -
We have a planned service maintenance for WildFire Italy Cloud on May 13, 2026 from 17:18:00 UTC to 18:18:00 UTC. Customer Impact: Customers may encounter intermittent disconnection during the maintenance window and detection delays.
May 13, 17:17 UTC
Completed -
The scheduled maintenance has been completed.
May 13, 00:30 UTC
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 12, 22:30 UTC
Scheduled -
We have a planned service maintenance for WildFire Global Cloud from May 12, 2026 22:30:00 UTC to May 13, 2026 00:30:00 UTC. Customer Impact: Customers may encounter intermittent disconnection during the maintenance window and detection delays.
May 12, 18:41 UTC