Skip to content

Commit 54f38c1

Browse files
[WAF] Update managed rules upgrade doc (#23932)
* Update managed rules upgrade guide with new nav info --------- Co-authored-by: Kate Tungusova <[email protected]>
1 parent 0980ac1 commit 54f38c1

File tree

4 files changed

+24
-15
lines changed

4 files changed

+24
-15
lines changed
-4.86 KB
Loading
Binary file not shown.
-4.7 KB
Loading

src/content/docs/waf/reference/legacy/old-waf-managed-rules/upgrade.mdx

Lines changed: 24 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,9 @@ On 2022-05-04, Cloudflare started the upgrade from the [previous version of WAF
1111

1212
Cloudflare is gradually upgrading all zones to the new version of WAF Managed Rules. You can also start the upgrade process manually for a zone in the Cloudflare dashboard or via API. **The upgrade is irreversible** — once you upgrade to the new WAF Managed Rules, you cannot go back to the previous version.
1313

14-
Once the upgrade finishes, the **Managed rules** tab in the Cloudflare dashboard (available in **Security** > **WAF** > **Managed rules**) will display a new interface, and the WAF managed rules APIs will stop working.
14+
If you are using the old dashboard, once the upgrade finishes your rules will be shown using a different user interface in **Security** > **WAF** > **Managed rules** tab. If you are using the [new security dashboard](/security/), your upgraded rules will be shown in **Security** > **Security rules**.
15+
16+
Additionally, the WAF managed rules APIs will stop working once you upgrade.
1517

1618
:::caution[Deprecation notice]
1719

@@ -89,13 +91,14 @@ If a zone has [URI-based WAF overrides](/api/resources/firewall/subresources/waf
8991

9092
### Cloudflare dashboard changes
9193

92-
After the upgrade process is complete, the Cloudflare dashboard will display the new WAF Managed Rules interface in **Security** > **WAF** > **Managed rules**, where you can deploy managed rulesets and adjust their configuration.
94+
After the upgrade process is complete, the Cloudflare dashboard will display your rules in:
9395

94-
![After upgrading to WAF Managed Rules, the Cloudflare dashboard will display a new interface where you can deploy managed rulesets to your zone.](~/assets/images/waf/reference/waf-migration-dashboard-differences.png)
96+
- Old dashboard: **Security** > **WAF** > **Managed rules** tab (using a different user interface)
97+
- New dashboard: **Security** > **Security rules**
9598

96-
Unlike the WAF managed rules, there is no global on/off setting to enable the WAF in the new interface. Instead, you deploy each managed ruleset individually in your zone.
99+
Unlike the old WAF managed rules, there is no longer a global on/off setting to enable the WAF. Instead, you deploy each managed ruleset individually in your zone.
97100

98-
For more information about configuring WAF Managed Rules in the dashboard, refer to [Deploy Managed Rulesets for a zone in the dashboard](/waf/managed-rules/deploy-zone-dashboard/).
101+
For more information about deploying WAF Managed Rules in the Cloudflare dashboard, refer to [Deploy a WAF managed ruleset in the dashboard](/waf/managed-rules/deploy-zone-dashboard/).
99102

100103
### API changes
101104

@@ -166,35 +169,41 @@ You can start the WAF upgrade in the Cloudflare dashboard or via API.
166169

167170
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and zone.
168171

169-
2. Go to **Security** > **WAF** > **Managed rules**.
172+
2. If you are using the old dashboard, go to **Security** > **WAF** > **Managed rules** tab.<br/>
173+
If you are using the [new security dashboard](/security/), go **to Security** > **Security rules** instead and select **Go to upgrade your Managed rules**.
170174

171175
If you are an Enterprise customer, the dashboard will show the following banner:
172176

173-
![The upgrade banner displayed to Enterprise customers in WAF > Managed rules.](~/assets/images/waf/reference/waf-migration-ent-banner.png)
177+
![The upgrade banner displayed to Enterprise customers.](~/assets/images/waf/reference/waf-migration-ent-banner.png)
174178

175179
If you are a Professional/Business customer, the dashboard will show the following banner:
176180

177-
![The upgrade banner displayed to Pro/Business customers in WAF > Managed rules.](~/assets/images/waf/reference/waf-migration-biz-banner.png)
181+
![The upgrade banner displayed to Pro/Business customers.](~/assets/images/waf/reference/waf-migration-biz-banner.png)
178182

179-
3. In the update banner, select **Review configuration**. This banner is only displayed in eligible zones.
183+
3. In the upgrade banner, select **Review configuration**. This banner is only displayed in eligible zones.
180184

181-
4. Review the proposed WAF configuration rules. You can make adjustments to the proposed configuration, like [editing the WAF Managed Rules configuration](/waf/managed-rules/deploy-zone-dashboard/#configure-a-managed-ruleset) or creating [exceptions](/waf/managed-rules/waf-exceptions/) to skip the execution of rulesets or specific rules.
185+
4. Review the proposed WAF configuration. You can adjust configuration, like [editing the WAF Managed Rules configuration](/waf/managed-rules/deploy-zone-dashboard/#configure-a-managed-ruleset) or creating [exceptions](/waf/managed-rules/waf-exceptions/) to skip the execution of rulesets or specific rules.
182186

183187
5. When you are done reviewing, select **Deploy** to deploy the new WAF Managed Rules configuration.
184188

185-
If you are a Professional/Business customer, Cloudflare will deploy the new WAF configuration and then disable the previous WAF version. The upgrade process may take a couple of minutes. When the migration finishes, the dashboard will display the new WAF Managed Rules interface in **Security** > **WAF** > **Managed rules**. To check if the upgrade has finished, refresh the dashboard.
189+
If you are a Professional/Business customer, Cloudflare will deploy the new WAF configuration and then disable the previous WAF version. The upgrade process may take a couple of minutes.
186190

187191
If you are an Enterprise customer, both WAF implementations will be enabled simultaneously when you select **Deploy**, so that you can validate your new configuration. Refer to the steps in the next section for additional guidance.
188192

189193
#### Validate your new WAF configuration and finish the upgrade (Enterprise customers only)
190194

191-
If you are an Enterprise customer, after deploying your new WAF configuration both WAF implementations will be enabled simultaneously. During this stage (called validation mode), the Cloudflare dashboard will display both WAF Managed Rules, old and new, in the **Managed rules** tab. The new WAF Managed Rules will run before the previous version.
195+
If you are an Enterprise customer, after deploying your new WAF configuration both WAF implementations will be enabled simultaneously. During this stage (called validation mode), you can access both implementations of WAF Managed Rules in the Cloudflare dashboard, which will keep showing the upgrade banner until you finish upgrading. The new WAF Managed Rules will run before the previous version.
196+
197+
1. Use the current validation mode to check the behavior of the new WAF configuration in [Security Events](/waf/analytics/security-events/). For more information, refer to [Analyzing the new WAF behavior in Security Events](#analyzing-the-new-waf-behavior-in-security-events).
198+
199+
2. When you are done reviewing your configuration with both WAFs enabled, select **Ready to update** in the upgrade banner, and then select **Turn off previous version**. This operation will complete the upgrade and disable the previous WAF version.
192200

193-
1. Use the current validation mode to check the behavior of the new WAF configuration in Security Events (**Security** > **Events**). For more information, refer to [Analyzing the new WAF behavior in Security Events](#analyzing-the-new-waf-behavior-in-security-events).
201+
When the upgrade finishes, the dashboard will show all of your upgraded rules in:
194202

195-
2. When you are done reviewing your configuration with both WAFs enabled, select **Ready to update** in the update banner, and then select **Turn off previous version**. This operation will complete the upgrade and disable the previous WAF version.
203+
- Old dashboard: **Security** > **WAF** > **Managed rules** tab
204+
- New dashboard: **Security** > **Security rules**
196205

197-
When the upgrade finishes, the dashboard will only display the new WAF Managed Rules interface in **Security** > **WAF** > **Managed rules**. To check if the upgrade has finished, refresh the dashboard.
206+
To check if the upgrade has finished, refresh the dashboard.
198207

199208
:::note
200209
The upgrade process can take up to an hour. During this period you may observe security events from both versions of WAF managed rules.

0 commit comments

Comments
 (0)