You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/waf/reference/legacy/old-waf-managed-rules/upgrade.mdx
+24-15Lines changed: 24 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,9 @@ On 2022-05-04, Cloudflare started the upgrade from the [previous version of WAF
11
11
12
12
Cloudflare is gradually upgrading all zones to the new version of WAF Managed Rules. You can also start the upgrade process manually for a zone in the Cloudflare dashboard or via API. **The upgrade is irreversible** — once you upgrade to the new WAF Managed Rules, you cannot go back to the previous version.
13
13
14
-
Once the upgrade finishes, the **Managed rules** tab in the Cloudflare dashboard (available in **Security** > **WAF** > **Managed rules**) will display a new interface, and the WAF managed rules APIs will stop working.
14
+
If you are using the old dashboard, once the upgrade finishes your rules will be shown using a different user interface in **Security** > **WAF** > **Managed rules** tab. If you are using the [new security dashboard](/security/), your upgraded rules will be shown in **Security** > **Security rules**.
15
+
16
+
Additionally, the WAF managed rules APIs will stop working once you upgrade.
15
17
16
18
:::caution[Deprecation notice]
17
19
@@ -89,13 +91,14 @@ If a zone has [URI-based WAF overrides](/api/resources/firewall/subresources/waf
89
91
90
92
### Cloudflare dashboard changes
91
93
92
-
After the upgrade process is complete, the Cloudflare dashboard will display the new WAF Managed Rules interface in **Security** > **WAF** > **Managed rules**, where you can deploy managed rulesets and adjust their configuration.
94
+
After the upgrade process is complete, the Cloudflare dashboard will display your rules in:
93
95
94
-

96
+
- Old dashboard: **Security** > **WAF** > **Managed rules** tab (using a different user interface)
97
+
- New dashboard: **Security** > **Security rules**
95
98
96
-
Unlike the WAF managed rules, there is no global on/off setting to enable the WAF in the new interface. Instead, you deploy each managed ruleset individually in your zone.
99
+
Unlike the old WAF managed rules, there is no longer a global on/off setting to enable the WAF. Instead, you deploy each managed ruleset individually in your zone.
97
100
98
-
For more information about configuring WAF Managed Rules in the dashboard, refer to [Deploy Managed Rulesets for a zone in the dashboard](/waf/managed-rules/deploy-zone-dashboard/).
101
+
For more information about deploying WAF Managed Rules in the Cloudflare dashboard, refer to [Deploy a WAF managed ruleset in the dashboard](/waf/managed-rules/deploy-zone-dashboard/).
99
102
100
103
### API changes
101
104
@@ -166,35 +169,41 @@ You can start the WAF upgrade in the Cloudflare dashboard or via API.
166
169
167
170
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and zone.
168
171
169
-
2. Go to **Security** > **WAF** > **Managed rules**.
172
+
2. If you are using the old dashboard, go to **Security** > **WAF** > **Managed rules** tab.<br/>
173
+
If you are using the [new security dashboard](/security/), go **to Security** > **Security rules** instead and select **Go to upgrade your Managed rules**.
170
174
171
175
If you are an Enterprise customer, the dashboard will show the following banner:
172
176
173
-

177
+

174
178
175
179
If you are a Professional/Business customer, the dashboard will show the following banner:
176
180
177
-

181
+

178
182
179
-
3. In the update banner, select **Review configuration**. This banner is only displayed in eligible zones.
183
+
3. In the upgrade banner, select **Review configuration**. This banner is only displayed in eligible zones.
180
184
181
-
4. Review the proposed WAF configuration rules. You can make adjustments to the proposed configuration, like [editing the WAF Managed Rules configuration](/waf/managed-rules/deploy-zone-dashboard/#configure-a-managed-ruleset) or creating [exceptions](/waf/managed-rules/waf-exceptions/) to skip the execution of rulesets or specific rules.
185
+
4. Review the proposed WAF configuration. You can adjust configuration, like [editing the WAF Managed Rules configuration](/waf/managed-rules/deploy-zone-dashboard/#configure-a-managed-ruleset) or creating [exceptions](/waf/managed-rules/waf-exceptions/) to skip the execution of rulesets or specific rules.
182
186
183
187
5. When you are done reviewing, select **Deploy** to deploy the new WAF Managed Rules configuration.
184
188
185
-
If you are a Professional/Business customer, Cloudflare will deploy the new WAF configuration and then disable the previous WAF version. The upgrade process may take a couple of minutes. When the migration finishes, the dashboard will display the new WAF Managed Rules interface in **Security** > **WAF** > **Managed rules**. To check if the upgrade has finished, refresh the dashboard.
189
+
If you are a Professional/Business customer, Cloudflare will deploy the new WAF configuration and then disable the previous WAF version. The upgrade process may take a couple of minutes.
186
190
187
191
If you are an Enterprise customer, both WAF implementations will be enabled simultaneously when you select **Deploy**, so that you can validate your new configuration. Refer to the steps in the next section for additional guidance.
188
192
189
193
#### Validate your new WAF configuration and finish the upgrade (Enterprise customers only)
190
194
191
-
If you are an Enterprise customer, after deploying your new WAF configuration both WAF implementations will be enabled simultaneously. During this stage (called validation mode), the Cloudflare dashboard will display both WAF Managed Rules, old and new, in the **Managed rules** tab. The new WAF Managed Rules will run before the previous version.
195
+
If you are an Enterprise customer, after deploying your new WAF configuration both WAF implementations will be enabled simultaneously. During this stage (called validation mode), you can access both implementations of WAF Managed Rules in the Cloudflare dashboard, which will keep showing the upgrade banner until you finish upgrading. The new WAF Managed Rules will run before the previous version.
196
+
197
+
1. Use the current validation mode to check the behavior of the new WAF configuration in [Security Events](/waf/analytics/security-events/). For more information, refer to [Analyzing the new WAF behavior in Security Events](#analyzing-the-new-waf-behavior-in-security-events).
198
+
199
+
2. When you are done reviewing your configuration with both WAFs enabled, select **Ready to update** in the upgrade banner, and then select **Turn off previous version**. This operation will complete the upgrade and disable the previous WAF version.
192
200
193
-
1. Use the current validation mode to check the behavior of the new WAF configuration in Security Events (**Security** > **Events**). For more information, refer to [Analyzing the new WAF behavior in Security Events](#analyzing-the-new-waf-behavior-in-security-events).
201
+
When the upgrade finishes, the dashboard will show all of your upgraded rules in:
194
202
195
-
2. When you are done reviewing your configuration with both WAFs enabled, select **Ready to update** in the update banner, and then select **Turn off previous version**. This operation will complete the upgrade and disable the previous WAF version.
203
+
- Old dashboard: **Security** > **WAF** > **Managed rules** tab
204
+
- New dashboard: **Security** > **Security rules**
196
205
197
-
When the upgrade finishes, the dashboard will only display the new WAF Managed Rules interface in **Security** > **WAF** > **Managed rules**. To check if the upgrade has finished, refresh the dashboard.
206
+
To check if the upgrade has finished, refresh the dashboard.
198
207
199
208
:::note
200
209
The upgrade process can take up to an hour. During this period you may observe security events from both versions of WAF managed rules.
0 commit comments