Skip to content

Commit 68db639

Browse files
authored
update Access block policy example (#24915)
1 parent 6fd5591 commit 68db639

File tree

1 file changed

+5
-5
lines changed
  • src/content/docs/cloudflare-one/policies/access

1 file changed

+5
-5
lines changed

src/content/docs/cloudflare-one/policies/access/index.mdx

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,14 +44,14 @@ For example, this second configuration lets any user from Portugal with a `@team
4444

4545
### Block
4646

47-
The Block action prevents users from reaching an application behind Access.
48-
49-
For example, this configuration blocks every request to the application, except for requests from `[email protected]`:
47+
The Block action prevents users who meet certain critera from reaching an application behind Access. For example, the following policy blocks requests from Russian source IPs that are not on your [list of approved IPs](/cloudflare-one/policies/gateway/lists/).
5048

5149
| Action | Rule type | Selector | Value |
5250
| ------ | --------- | -------- | ----------------- |
53-
| Block | Include | Everyone | `Everyone` |
54-
| | Exclude | Email | `[email protected]` |
51+
| Block | Include | Country | `Russian Federation` |
52+
| | Exclude | IP list | `Corporate IP allowlist` |
53+
54+
Block policies are best used in conjunction with [Allow policies](#allow) as a way to carve out exceptions in those Allow policies. Since Access is deny by default, users who do not match a Block policy will still be denied access unless they explicitly match an Allow policy.
5555

5656
### Bypass
5757

0 commit comments

Comments
 (0)