Skip to content

Commit 684e555

Browse files
committed
Add to implementation guide
1 parent 64b9edd commit 684e555

File tree

1 file changed

+12
-1
lines changed
  • src/content/docs/learning-paths/secure-internet-traffic/build-http-policies

1 file changed

+12
-1
lines changed

src/content/docs/learning-paths/secure-internet-traffic/build-http-policies/tls-inspection.mdx

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ sidebar:
55
order: 1
66
---
77

8-
import { GlossaryTooltip, Render, TabItem, Tabs } from "~/components";
8+
import { GlossaryTooltip, Render, TabItem, Tabs, Badge } from "~/components";
99

1010
TLS inspection (also known as TLS decryption or HTTPS inspection) allows Cloudflare Gateway to perform deeper traffic analysis and take actions like scanning request bodies for sensitive data, upgrading to a remote browser isolation session, and redirecting based on the complete URL and path of requests.
1111

@@ -36,6 +36,17 @@ To turn on TLS inspection for your Zero Trust organization:
3636

3737
<Render file="gateway/enable-tls-decryption" product="cloudflare-one" />
3838

39+
#### Inspect on all ports <Badge text="Beta" variant="caution" size="small" />
40+
41+
<Render
42+
file="gateway/inspect-on-all-ports"
43+
product="cloudflare-one"
44+
params={{
45+
turnOnProcedure:
46+
"you can turn on [protocol detection](/cloudflare-one/policies/gateway/network-policies/protocol-detection/) and configure Gateway to [inspect traffic on all ports](/cloudflare-one/policies/gateway/network-policies/protocol-detection/#inspect-on-all-ports)",
47+
}}
48+
/>
49+
3950
### 3. Determine the certificate used for inspection
4051

4152
TLS inspection requires a trusted private root certificate to be able to inspect and filter encrypted traffic. A [Cloudflare root certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/automated-deployment/) is a simple and common solution that is usually appropriate for testing or proof-of-concept conditions when deployed to your devices. You can [generate a Cloudflare certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate) in Zero Trust.

0 commit comments

Comments
 (0)