Next-Gen WAF (NGWAF) with Possible Impact

Incident
06 January 2026, 20:57 UTC

Next-Gen WAF (NGWAF) with Possible Impact

Status: closed
Start: 03 January 2026, 13:50 UTC
End: 06 January 2026, 20:57 UTC
Duration: 3 days 7 hours 7 minutes
Affected Components:
Security Next-Gen WAF (NGWAF)
Affected Groups:
All Public Users
Investigating

03 January 2026, 13:50 UTC

03 January 2026, 13:50 UTC

We're investigating an issue causing a performance impact to Next-Gen WAF (NGWAF) service.

Our engineers are actively working to diagnose the contributing factor. We will provide another update as more information becomes available or within the next hour.

All other locations and services are unaffected.

Identified

06 January 2026, 20:04 UTC

06 January 2026, 20:04 UTC

Our engineers believe they have identified contributing factor causing the issue impacting the Next-Gen WAF (NGWAF) status page component.

We are now developing a fix, and will post a new update once it has been fully implemented and we see signs of recovery.

All other products and services are unaffected by this incident.

Monitoring

06 January 2026, 20:43 UTC

06 January 2026, 20:43 UTC

Engineering has confirmed the impact to Next-Gen WAF (NGWAF) service has been mitigated.

Resolved

06 January 2026, 20:57 UTC

06 January 2026, 20:57 UTC

Engineering has confirmed that Next-Gen WAF (NGWAF) service has been fully restored. Customers may have experienced a delay in propagation of new rules to NGWAF from 13:50 UTC on the 3rd of January 2026 to the 6th of January 2026 20:12 UTC. Existing NGWAF rules were not impacted. 

This incident is resolved.

Affected customers may have experienced impact to varying degrees and to a shorter duration than as set forth above.

To offer feedback on our status page, click "Give Feedback

Status Post, Created Date/Time: 2026-01-06 19:37:27 UTC 



Note: Our Customer Escalation Management team will update the start date and time of the initial "investigating" status post upon the resolution of this incident. This update is meant to provide our customers and their end users with a potential impact window. The date and time mentioned in the message above indicates when the status post was requested by our Acute Incident Response team.