Skip to content

Commit 63f8126

Browse files
committed
Add Gateway policies
1 parent d85969a commit 63f8126

File tree

1 file changed

+15
-3
lines changed

1 file changed

+15
-3
lines changed

src/content/docs/cloudflare-one/policies/data-loss-prevention/dlp-profiles/advanced-settings.mdx

Lines changed: 15 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,23 @@ Match count refers to the number of times that any enabled entry in the profile
1717

1818
Confidence levels indicate how confident Cloudflare DLP is in a DLP detection. DLP determines the confidence by inspecting the content for proximity keywords around the detection.
1919

20-
Low confidence detections are generally based on regular expressions, require few keywords, and will trigger more often. High confidence detections require more keywords, will trigger less often, and have a higher likelihood of accuracy. Setting the confidence to Low will also consider Medium and High confidence detections as matches. Setting the confidence to Medium or High will filter out the lower confidence detections.
20+
Confidence level is set on the DLP profile. When you select a confidence level in Zero Trust, you will see which DLP entries will be affected by the confidence level. Entries that do not reflect a confidence level in Zero Trust are not yet supported or are not applicable.
2121

22-
Confidence level is set on the DLP profile. When you select a confidence in Zero Trust, you will see which DLP entries will be affected by the confidence level. Entries that do not reflect a confidence level in Zero Trust are not yet supported or are not applicable.
22+
DLP confidence detections consist of Low, Medium, and High confidence levels. DLP will default to Low confidence detections, which are based on regular expressions, require few keywords, and will trigger more often. Medium and High confidence detections require more keywords, will trigger less often, and have a higher likelihood of accuracy.
2323

24-
For inline detections in Gateway, if you would like to display Low and Medium confidence detections but block High confidence detections, Cloudflare recommends using two policies. The first policy should use a Low confidence DLP profile with an Allow action. The second policy should use a High confidence DLP profile with a Block action.
24+
Setting the confidence to Low will also consider Medium and High confidence detections as matches. Setting the confidence to Medium or High will filter out lower confidence detections.
25+
26+
### Gateway detections
27+
28+
For inline detections in Gateway, to display Low and Medium confidence detections but block High confidence detections, Cloudflare recommends creating two HTTP policies. The first policy should use a Low confidence DLP profile with an Allow action. The second policy should use a High confidence DLP profile with a Block action. For example:
29+
30+
| Selector | Operator | Value | Action |
31+
| ----------- | -------- | --------------------------- | ------ |
32+
| DLP Profile | in | _Low Confidence Detections_ | Allow |
33+
34+
| Selector | Operator | Value | Action |
35+
| ----------- | -------- | ---------------------------- | ------ |
36+
| DLP Profile | in | _High Confidence Detections_ | Block |
2537

2638
## Optical Character Recognition (OCR) <Badge text="Beta" variant="caution" size="small" />
2739

0 commit comments

Comments
 (0)