{"id":305447,"date":"2024-10-23T12:36:28","date_gmt":"2024-10-23T10:36:28","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=305447"},"modified":"2024-10-23T12:37:37","modified_gmt":"2024-10-23T10:37:37","slug":"watchguard-macht-probleme-20-23-oktober-2024","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2024\/10\/23\/watchguard-macht-probleme-20-23-oktober-2024\/","title":{"rendered":"WatchGuard macht Probleme (20. – 23. Oktober 2024)"},"content":{"rendered":"

\"Stop[English]Unsch\u00f6ne Geschichte, auf die mich ein Blog-Leser gerade hingewiesen hat. Es gibt seit einigen Tagen, wohl vom 20.\u00a0 Oktober 2024 bis zum heutigen 23.10.2024 wohl Probleme mit dem Dienst WatchGuard. Was zuerst wie ein Brute-Force-Angriff aussah, ist auf technische Probleme zur\u00fcckzuf\u00fchren. Der Ausfall bzw. die Probleme bedeuten f\u00fcr Anwender, dass bei denen VPN-Verbindungen (SSL-VPN) nicht mehr funktionieren.<\/p>\n

<\/p>\n

Was oder wer ist WatchGuard?<\/h2>\n

\"\"WatchGuard<\/a> Technologies ist ein Anbieter von Internetsicherheitsl\u00f6sungen mit Sitz in Seattle. Bekannt wurde WatchGuard durch ihre Firewall und VPN-L\u00f6sung f\u00fcr kleine und mittelst\u00e4ndische Unternehmen.<\/p>\n

\"WatchGuard\"<\/a><\/p>\n

Laut Eigenbeschreibung auf der Webseite des Anbieters<\/a> soll die Sicherheitsl\u00f6sung \"Unified Security Platform\u00ae\"<\/sup> effiziente, leistungsstarke Sicherheitsdienste mit h\u00f6herer Skalierbarkeit und Geschwindigkeit erm\u00f6glichen und gleichzeitig die betriebliche Effizienz steigern. Gilt nat\u00fcrlich nur solange das Zeugs funktioniert.<\/p>\n

WatchGuard scheint gest\u00f6rt<\/h2>\n

Blog-Leser Benjamin S. hat mich heute Vormittag per Mail dar\u00fcber informiert, dass es in seinem Umfeld Probleme mit dem WatchGuard-Dienst gebe. Er schrieb mir, dass er seit \"gestern fr\u00fch um 07:30 Uhr\" (war der 22. Oktober 2024) Informationen von seinen Kolleginnen und Kollegen erhalten habe, dass die VPN-Verbindung (SSL-VPN) nicht mehr klappt.<\/p>\n

In seinem betrieblichen Umfeld verwendet man zur Authentifizierung (OTP-Token) WatchGuard Auth Point. Nun erhielten die Anwender beim Anmeldeversuch die Fehlermeldung \"Benutzername oder Passwort falsch\" zur\u00fcck. Als die IT dann die Log-Dateien \u00fcberpr\u00fcft hat, wurden \"Unmengen\" an Anmeldeversuchen von Usern gefunden, dies gar nicht gibt, schrieb mir der Leser.<\/p>\n

Zun\u00e4chst war die Vermutung, dass es Brute-Force-Angriffe g\u00e4be. Er hat dann seinen\u00a0Dienstleister diesbez\u00fcglich kontaktiert, weil er davon ausging, dass der Radius-Authentifizierungs-Server durch die zahlreichen Brute-Force-Versuche nicht mehr funktioniert. Allerdings kam dann raus, so der Blog-Leser, dass WatchGuard aktuell ein gr\u00f6\u00dferes Problem hatte – hier der Statusauszug:<\/p>\n

\"Watchguard<\/a>
\nStatusseite, Zum Vergr\u00f6\u00dfern klicken<\/a><\/p>\n

St\u00f6rung vom 20. 10. – 23.10.2024<\/h2>\n

Ich habe aktuell auf der WatchGuard-Statusseite<\/a> geschaut, da wird aktuell alles \"im gr\u00fcnen Bereich\" angezeigt. Gehe ich aber auf die Historie, wird mir eine St\u00f6rung seit dem 20. Oktober 2024 gezeigt:<\/p>\n

\n
2024-10-20 – Global – MFA Push Notifications and Timeout Issues<\/h5>\n

Monitoring<\/strong>\u00a0– Our system shows that authentication services are returning to normal operations. We will continue monitoring the performance of AuthPoint Authentication services. Again we apologize for any impact this may have had on you or your customers. We'll post our next update if we have any new information.<\/p>\n

Oct 23 2024, 10:12 UTC<\/p>\n

Monitoring<\/strong>\u00a0– Our system shows that errors have returned to normal, and we continue monitoring the performance of AuthPoint Authentication services. We remain engaged and continue to investigate this issue. We'll post our next update if we have any new information. Thank you for your continued patience!<\/p>\n

Oct 22 2024, 21:26 UTC<\/p>\n

Investigating<\/strong>\u00a0– We are still facing issues with AuthPoint authentication. Our monitoring shows that login through OTP is returning to normal. Again we apologize for any impact this may have had on you or your customers. We'll post our next update if we have any new information.<\/p>\n

Oct 22 2024, 18:46 UTC<\/p>\n

Investigating<\/strong>\u00a0– We are still investigating the AuthPoint Authentication issues. Our monitoring indicates that login through OTP is returning to normal. We'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 22 2024, 17:46 UTC<\/p>\n

Investigating<\/strong>\u00a0– We are still working hard to resolve the SAML login errors and the intermittent issues with push notifications. We'll post our next update in 1 hour, if not sooner. Thanks for your patience.<\/p>\n

Oct 22 2024, 16:45 UTC<\/p>\n

Investigating<\/strong>\u00a0– In addition to the SAML login errors in the AMER region, we are now experiencing intermittent issues with push notifications. Our team is investigating both issues to implement a resolution as quickly as possible. We'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 22 2024, 15:47 UTC<\/p>\n

Investigating<\/strong>\u00a0– We have identified that the errors are occurring specifically with SAML logins in the AMER region, while other regions are operating normally. Our teams are working to restore normal operations and we apologize for the impact this event has caused. We'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 22 2024, 14:46 UTC<\/p>\n

Investigating<\/strong>\u00a0– We're investigating errors occurring occurring while logging into the IDP portal. We'll post our next update in 1 hour, if not sooner. Thanks for your patience.<\/p>\n

Oct 22 2024, 14:30 UTC<\/p>\n

Monitoring<\/strong>\u00a0– Our authentication service is returning to normal after the mitigation measures taken by the team, WGC logins should not be longer impacted, and we're monitoring to ensure system stability. We'll post our next update in 30 minutes, if not sooner.<\/p>\n

Oct 22 2024, 13:58 UTC<\/p>\n

Monitoring<\/strong>\u00a0– The current issue is also affecting Watchguard Cloud Login in AMER. Our teams are still working hard to find the root cause of the issue. We are actively monitoring system stability. Push notifications in EMEA are improving performance.<\/p>\n

Oct 22 2024, 12:58 UTC<\/p>\n

Monitoring<\/strong>\u00a0– Our teams are still working hard to find the root cause of the issue. We are actively monitoring system stability. We'll post our next update if we have any new information<\/p>\n

Oct 22 2024, 11:39 UTC<\/p>\n

Monitoring<\/strong>\u00a0– Our teams are still working hard to find the root cause of the issue. We are actively monitoring system stability. We'll post our next update if we have any new information<\/p>\n

Oct 22 2024, 11:31 UTC<\/p>\n

Monitoring<\/strong>\u00a0– We're seeing some delays in push notifications for IDP where the push replies could be slightly delayed in EMEA and AMER regions. Our teams are investigating potential causes and solutions. Thank you for your continued patience, and we'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 22 2024, 10:06 UTC<\/p>\n

Monitoring<\/strong>\u00a0– We have resolved the intermittent issues with delayed push notifications, and everything is now operating normally. If you are still experiencing problems with RADIUS authentications, please contact WatchGuard support. Thank you for your patience.<\/p>\n

Oct 21 2024, 19:41 UTC<\/p>\n

Monitoring<\/strong>\u00a0– Our teams have continued to monitor this issue and services are operating normally. If you are still experiencing issues with RADIUS authentications, please contact WatchGuard support. Again we apologize for any impact this may have had on you or your customers.<\/p>\n

Oct 21 2024, 16:14 UTC<\/p>\n

Monitoring<\/strong>\u00a0– The service is operating normally at this time, and we are actively monitoring the system. If you are still experiencing issues with RADIUS authentications, please contact WatchGuard support. We apologize for the impact this event has caused. We'll post our next update if we have any new information. Thank you for your patience.<\/p>\n

Oct 21 2024, 02:36 UTC<\/p>\n

Monitoring<\/strong>\u00a0– We are still working to find the root cause of the issue, but services are currently operating normally, and we are actively monitoring system stability. We'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 21 2024, 01:35 UTC<\/p>\n

Monitoring<\/strong>\u00a0– We have mitigated the issue with our recent fix, and services are now operating normally. Our team remains engaged and continues to investigate the issue. We'll post our next update in 1 hour, if not sooner. Thanks for your patience.<\/p>\n

Oct 21 2024, 00:34 UTC<\/p>\n

Investigating<\/strong>\u00a0– We are still working hard to address the recurring issues with MFA push notifications and timeouts in both the EU and US. Our team is actively investigating the root causes and potential solutions. Thank you for your understanding. We'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 20 2024, 23:24 UTC<\/p>\n

Investigating<\/strong>\u00a0– We have implemented a temporary fix in the US, and operations are now functioning normally. Our team is currently working on applying the same fix in the EU. We'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 20 2024, 22:26 UTC<\/p>\n

Investigating<\/strong>\u00a0– We are still working hard to resolve the MFA push notification and timeout issues. Our team is investigating potential causes and solutions. Thank you for your continued patience, and we'll post our next update in 1 hour, if not sooner.<\/p>\n

Oct 20 2024, 21:22 UTC<\/p>\n

Investigating<\/strong>\u00a0– We are still working hard to identify the issue with MFA push notifications and timeouts. Our team is making progress, and we appreciate your continued patience. We'll post our next update in 1 hour, if not sooner. Thank you!<\/p>\n

Oct 20 2024, 20:20 UTC<\/p>\n

Investigating<\/strong>\u00a0– We continue to work on the MFA push notifications and timeout issues, which are currently affecting users in the EU and US only. We'll post our next update in 30 minutes, if not sooner.<\/p>\n

Oct 20 2024, 19:48 UTC<\/p>\n

Investigating<\/strong>\u00a0– We're currently investigating the issue where users are not receiving MFA push notifications or are experiencing timeouts even after approval. Once we determine the impact and scale of these potential issues, we'll post our next update in 30 minutes, if not sooner.<\/p>\n

Oct 20 2024, 19:16 UTC<\/p>\n<\/blockquote>\n

Dort erf\u00e4hrt man, dass der Dienst zum 20. Oktober 2024 (Abends) bis zum 23. Oktober 2024 gest\u00f6rt war. So um die drei Tage Ausfall, an denen Nutzer ggf. keine Authentifizierung f\u00fcr SSL-VPN-Verbindungen vornehmen konnten. Nicht wirklich sch\u00f6n. War sonst noch jemand betroffen? Ist das Problem behoben?<\/p>\n","protected":false},"excerpt":{"rendered":"

[English]Unsch\u00f6ne Geschichte, auf die mich ein Blog-Leser gerade hingewiesen hat. Es gibt seit einigen Tagen, wohl vom 20.\u00a0 Oktober 2024 bis zum heutigen 23.10.2024 wohl Probleme mit dem Dienst WatchGuard. Was zuerst wie ein Brute-Force-Angriff aussah, ist auf technische Probleme … Weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7459,7862],"tags":[3836,987],"class_list":["post-305447","post","type-post","status-publish","format-standard","hentry","category-software","category-stoerung","tag-software","tag-storung"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/305447","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=305447"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/305447\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=305447"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=305447"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=305447"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}