Skip to content

Commit 918ecee

Browse files
Link zone-lockdown to WAF to account for both dash experiences (cloudflare#26649)
1 parent c711910 commit 918ecee

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

src/content/partials/smart-shield/zone-lockdown.mdx

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -4,22 +4,21 @@
44

55
Currently, any Cloudflare customer on a paid plan can configure Health Checks against any host or IP. [Zone Lockdown](/waf/tools/zone-lockdown/) specifies a list of one or more IP addresses, CIDR ranges, or networks that are the only IPs allowed to access a domain, subdomain, or URL. It allows multiple destinations in a single rule as well as IPv4 and IPv6 addresses. IP addresses not specified in the Zone Lockdown rule are denied access to the specified resources.
66

7-
Customers who use zone lockdown and want their health checks to continue passing can follow the guide below to bypass zone lockdown.
7+
Customers who use zone lockdown and want their health checks to continue passing can use [WAF custom rules](/waf/custom-rules/create-dashboard/) to bypass zone lockdown.
88

99
## Bypass zone lockdown
1010

1111
To bypass zone lockdown using a WAF custom rule:
1212

13-
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account and domain.
14-
2. Go to **Security** > **WAF** > **Custom rules**.
15-
3. Select **Create rule**.
16-
4. Create a custom rule matching on **user agent**.
17-
5. Set the action to *Skip* and the corresponding feature to **Zone Lockdown** under **More components to skip**.
13+
1. Follow the steps to [create a custom rule in the dashboard](/waf/custom-rules/create-dashboard/).
14+
2. Create a custom rule matching on **user agent**.
1815

19-
Cloudflare Health Checks have a user agent of the following format:
20-
`Mozilla/5.0 (compatible;Cloudflare-Healthchecks/1.0;+https://www.cloudflare.com/; healthcheck-id: XXX)` where `XXX` is replaced with the first 16 characters of the Health Check ID.
16+
Cloudflare Health Checks have a user agent of the following format:
17+
`Mozilla/5.0 (compatible;Cloudflare-Healthchecks/1.0;+https://www.cloudflare.com/; healthcheck-id: XXX)` where `XXX` is replaced with the first 16 characters of the Health Check ID.
2118

22-
To allow a specific Health Check, verify if the user agent contains the first 16 characters of the Health Check ID.
19+
To allow a specific Health Check, verify if the user agent contains the first 16 characters of the Health Check ID.
20+
21+
3. Set the action to *Skip* and the corresponding feature to **Zone Lockdown** under **More components to skip**.
2322

2423
### Via the API
2524

0 commit comments

Comments
 (0)