{"id":4927,"date":"2024-02-01T14:14:12","date_gmt":"2024-02-01T22:14:12","guid":{"rendered":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/?p=4927"},"modified":"2024-02-01T14:15:03","modified_gmt":"2024-02-01T22:15:03","slug":"follow-up-to-network-outage-on-january-25-2024-root-cause-analysis","status":"publish","type":"post","link":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/2024\/02\/01\/follow-up-to-network-outage-on-january-25-2024-root-cause-analysis\/","title":{"rendered":"Follow up to Network Outage on January 25, 2024 &#8211; Root Cause Analysis"},"content":{"rendered":"<div class=\"postie-post\">\n<div dir=\"ltr\">\n<div>\n<div dir=\"ltr\" class=\"gmail_signature\" data-smartmail=\"gmail_signature\">\n<div dir=\"ltr\">\n<div>\n<div><span id=\"gmail-docs-internal-guid-38c23216-7fff-be62-51e0-16b7dfb458f4\"><\/p>\n<div dir=\"ltr\" style=\"margin-left:0pt\" align=\"left\">\n<table style=\"border:none;border-collapse:collapse\">\n<colgroup>\n<col width=\"624\"><\/colgroup>\n<thead>\n<tr style=\"height:98.5pt\">\n<th style=\"vertical-align:top;background-color:rgb(102,0,0);padding:5pt;overflow:hidden\" scope=\"col\">\n<p dir=\"ltr\" style=\"line-height:1.656;margin-top:0pt;margin-bottom:0pt\"><a href=\"https:\/\/www.pugetsound.edu\/technology-services\" style=\"text-decoration-line:none\"><span style=\"font-size:11pt;font-family:Arial,sans-serif;background-color:transparent;font-weight:400;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline\"><span style=\"border:none;display:inline-block;overflow:hidden;width:276px;height:105px\"><img loading=\"lazy\" decoding=\"async\" alt=\"This logo identifies the Technology Services department within the University of Puget Sound\" title=\"University of Puget Sound Technology Services Logo\" src=\"https:\/\/lh7-us.googleusercontent.com\/ufcr613-oogDkolfs6Zi7iFlF4AFELDUI3tl1wjom8stKAwPwJDUX16rwf36MVmr9or3TyzgpYmJK5_jkF7Ha6YxIv8c4DUBXzuLK8tvKCA4_wXSBk2sxFbatTW-QAPs-cmO6onK2DC4_XeJdIr9eO4\" width=\"276\" height=\"105\" style=\"margin-left: 0px; margin-top: 0px;\"><\/span><\/span><\/a><\/p>\n<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr style=\"height:162.75pt\">\n<td style=\"vertical-align:top;padding:5pt;overflow:hidden\">\n<p dir=\"ltr\" style=\"line-height:1.44;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\" style=\"\">Dear members of the Puget Sound community,<\/font><\/span><\/p>\n<p><font face=\"arial, sans-serif\"><br \/><\/font><\/p>\n<p dir=\"ltr\" style=\"line-height:1.44;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\">Technology Services has prepared a Root Cause Analysis for the network incident that occurred on January 25th. The summary below provides additional technical details about the event as well as the course of action taken to restore services.<\/font><\/span><\/p>\n<p><font face=\"arial, sans-serif\"><br \/><\/font><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\">ISSUE AND IMPACT:<\/font><\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\">On January 25th at 2:30 p.m. the campus network began experiencing a level of instability that prevented users from accessing systems and services connected to the internet. During the duration of the network outage, services like Zoom Phone, Canvas, Google Workspace, and Okta were unreachable from within the campus network.<\/font><\/span><\/p>\n<p><font face=\"arial, sans-serif\"><br \/><\/font><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\">ROOT CAUSE:<\/font><\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\">After careful analysis of our event logs, we identified that the initial trigger of the event was caused by a change pushed by our Juniper Mist controller to a series of network devices. This change triggered a network routing convergence across a series of networks which were legacy artifacts of a security policy implementation that was never fully completed by Technology Services. Additionally, these changes triggered a series of events on our Palo Alto Firewalls ultimately causing the devices to no longer accept routing updates from the Juniper Core. At this point, both the Juniper Core and the Palo Alto firewall units were no longer able to successfully pass internet-bound traffic.<\/font><\/span><\/p>\n<p><font face=\"arial, sans-serif\"><br \/><\/font><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"><font face=\"arial, sans-serif\">SOLUTION:<\/font><\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><font face=\"arial, sans-serif\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">Technology Services reviewed all available logging information with our engineering team and determined that the legacy networks highlighted above as well as the associated firewall configuration should be removed from our network. Also, after careful review of the routing protocol used between the Juniper Core and the Palo Alto firewalls, it was decided that we should utilize a static routing protocol between the firewalls and the campus core network. The above stated solution has been scheduled for implementation on Thursday, February 8th at 5:00 a.m. A separate communication will be shared through the <\/span><a href=\"https:\/\/www.pugetsound.edu\/technology-services\/help-support\/service-announcements\" style=\"text-decoration-line:none\"><span style=\"background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline\">Service Announcements<\/span><\/a><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"> page detailing the events that will occur during the outage window.<\/span><\/font><\/p>\n<p><font face=\"arial, sans-serif\"><br \/><\/font><\/p>\n<p dir=\"ltr\" style=\"line-height:1.38;margin-top:0pt;margin-bottom:0pt\"><font face=\"arial, sans-serif\"><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">For more information on Technology Services&#39; Incident Communication Plan or to view a list of our Critical Systems and definitions, please visit our <\/span><a href=\"https:\/\/www.pugetsound.edu\/technology-services\/help-support\/service-announcements\" style=\"text-decoration-line:none\"><span style=\"background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline\">Service Announcements<\/span><\/a><span style=\"color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"> page on the Puget Sound website.<\/span><\/font><\/p>\n<p><\/td>\n<\/tr>\n<tr style=\"height:78.75pt\">\n<td style=\"vertical-align:top;background-color:rgb(102,0,0);padding:5pt;overflow:hidden\">\n<p dir=\"ltr\" style=\"line-height:1.656;margin-top:0pt;margin-bottom:0pt\"><span style=\"font-size:11pt;font-family:Arial,sans-serif;color:rgb(250,250,250);background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">TS Service Desk<\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.656;margin-top:0pt;margin-bottom:0pt\"><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(250,250,250);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">Walk-In Support: Tech Center in Collins Library<\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.656;margin-top:0pt;margin-bottom:0pt\"><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(250,250,250);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">Phone Support: (253) 879-8585<\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.656;margin-top:0pt;margin-bottom:0pt\"><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(250,250,250);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">Online Help: <\/span><a href=\"https:\/\/www.pugetsound.edu\/osd\" style=\"text-decoration-line:none\"><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(217,217,217);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline\">\u00a0https:\/\/www.pugetsound.edu\/osd<\/span><\/a><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(250,250,250);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\"> (Logon Required)<\/span><\/p>\n<p dir=\"ltr\" style=\"line-height:1.656;margin-top:0pt;margin-bottom:0pt\"><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(250,250,250);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline\">Email Support: <\/span><a href=\"mailto:servicedesk@pugetsound.edu\" style=\"text-decoration-line:none\"><span style=\"font-size:10pt;font-family:Arial,sans-serif;color:rgb(217,217,217);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline\"><a href=\"mailto:servicedesk@pugetsound.edu\" >servicedesk@pugetsound.edu<\/a><\/span><\/a><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p><\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Dear members of the Puget Sound community, Technology Services has prepared a Root Cause Analysis for the network incident that occurred on January 25th. The summary below provides additional technical details about the event as well as the course of &hellip; <a href=\"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/2024\/02\/01\/follow-up-to-network-outage-on-january-25-2024-root-cause-analysis\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":525,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-4927","post","type-post","status-publish","format-standard","hentry","category-announcements"],"_links":{"self":[{"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/posts\/4927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/users\/525"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/comments?post=4927"}],"version-history":[{"count":0,"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/posts\/4927\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/media?parent=4927"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/categories?post=4927"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.pugetsound.edu\/tsmaintenance\/wp-json\/wp\/v2\/tags?post=4927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}