Skip to content

Commit 6915edf

Browse files
maxvpmaxvp
committed
Add block application partials
1 parent 0ab52bb commit 6915edf

File tree

7 files changed

+91
-66
lines changed

7 files changed

+91
-66
lines changed

‎src/content/docs/cloudflare-one/policies/gateway/dns-policies/common-policies.mdx‎

Lines changed: 4 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -72,34 +72,10 @@ The categories included in this policy are not always a security threat, but blo
7272

7373
<Render file="gateway/policies/block-applications" product="cloudflare-one" />
7474

75-
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
76-
77-
| Selector | Operator | Value | Action |
78-
| ----------- | -------- | ------------------------- | ------ |
79-
| Application | in | _Artificial Intelligence_ | Block |
80-
81-
</TabItem>
82-
83-
<TabItem label="API">
84-
85-
```bash
86-
curl https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rule \
87-
--header "Content-Type: application/json" \
88-
--header "Authorization: Bearer <API_TOKEN>" \
89-
--data '{
90-
"name": "Block unauthorized applications",
91-
"description": "Block access to unauthorized AI applications",
92-
"enabled": true,
93-
"action": "block",
94-
"filters": [
95-
"dns"
96-
],
97-
"traffic": "any(app.type.ids[*] in {25})",
98-
"identity": ""
99-
}'
100-
```
101-
102-
</TabItem> </Tabs>
75+
<Render
76+
file="gateway/policies/dash-plus-api/dns-block-applications"
77+
product="cloudflare-one"
78+
/>
10379

10480
## Block banned countries
10581

‎src/content/docs/cloudflare-one/policies/gateway/http-policies/common-policies.mdx‎

Lines changed: 4 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -101,35 +101,10 @@ Block content categories which go against your organization's acceptable use pol
101101

102102
<Render file="gateway/policies/block-applications" product="cloudflare-one" />
103103

104-
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
105-
106-
| Selector | Operator | Value | Action |
107-
| ----------- | -------- | ------------------------- | ------ |
108-
| Application | in | _Artificial Intelligence_ | Block |
109-
110-
</TabItem>
111-
112-
<TabItem label="API">
113-
114-
```bash
115-
curl https://api.cloudflare.com/client/v4/accounts/{account_id}/gateway/rule \
116-
--header "Content-Type: application/json" \
117-
--header "Authorization: Bearer <API_TOKEN>" \
118-
--data '{
119-
"name": "Block unauthorized applications",
120-
"description": "Block access to unauthorized AI applications",
121-
"enabled": true,
122-
"action": "block",
123-
"filters": [
124-
"http"
125-
],
126-
"traffic": "any(app.type.ids[*] in {25})",
127-
"identity": "",
128-
"device_posture": ""
129-
}'
130-
```
131-
132-
</TabItem> </Tabs>
104+
<Render
105+
file="gateway/policies/dash-plus-api/http-block-applications"
106+
product="cloudflare-one"
107+
/>
133108

134109
## Check user identity
135110

‎src/content/docs/learning-paths/secure-internet-traffic/build-dns-policies/recommended-dns-policies.mdx‎

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ curl --request POST \
3333
--header "Authorization: Bearer <API TOKEN>" \
3434
--data '{
3535
"name": "All-DNS-Domain-Allowlist",
36-
"description": "Organization-wide whitelist. Explicitly allow resolution of these DNS domains",
36+
"description": "Organization-wide allowlist. Explicitly allow resolution of these DNS domains",
3737
"precedence": 0,
3838
"enabled": false,
3939
"action": "allow",
@@ -52,7 +52,7 @@ curl --request POST \
5252
resource "cloudflare_zero_trust_gateway_policy" "dns_whitelist_policy" {
5353
account_id = var.account_id
5454
name = "All-DNS-Domain-Allowlist"
55-
description = "Organization-wide whitelist. Explicitly allow resolution of these DNS domains"
55+
description = "Organization-wide allowlist. Explicitly allow resolution of these DNS domains"
5656
precedence = 0
5757
enabled = false
5858
action = "allow"
@@ -164,6 +164,11 @@ resource "cloudflare_zero_trust_gateway_policy" "dns_restrict_quarantined_users"
164164

165165
<Render file="zero-trust/blocklist-application" />
166166

167+
<Render
168+
file="gateway/policies/dash-plus-api/dns-block-applications"
169+
product="cloudflare-one"
170+
/>
171+
167172
</Details>
168173

169174
<Details header="All-DNS-GeoCountryIP-Blocklist">

‎src/content/docs/learning-paths/secure-internet-traffic/build-http-policies/recommended-http-policies.mdx‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,11 @@ Bypass HTTP inspection for a custom list of domains identified as incompatible w
7676

7777
<Render file="zero-trust/blocklist-application" />
7878

79+
<Render
80+
file="gateway/policies/dash-plus-api/http-block-applications"
81+
product="cloudflare-one"
82+
/>
83+
7984
</Details>
8085

8186
<Details header="PrivilegedUsers-HTTP-Any-Isolate">

‎src/content/partials/cloudflare-one/gateway/policies/dash-plus-api/dns-block-applications.mdx‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
---
2+
{}
3+
---
4+
5+
import { Tabs, TabItem } from "~/components";
6+
7+
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
8+
9+
| Selector | Operator | Value | Action |
10+
| ----------- | -------- | ------------------------- | ------ |
11+
| Application | in | _Artificial Intelligence_ | Block |
12+
13+
</TabItem>
14+
15+
<TabItem label="API">
16+
17+
```bash
18+
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/gateway/rule \
19+
--header "Content-Type: application/json" \
20+
--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN>" \
21+
--data '{
22+
"name": "Block unauthorized applications",
23+
"description": "Block access to unauthorized AI applications",
24+
"enabled": true,
25+
"action": "block",
26+
"filters": [
27+
"dns"
28+
],
29+
"traffic": "any(app.type.ids[*] in {25})",
30+
"identity": ""
31+
}'
32+
```
33+
34+
</TabItem> </Tabs>

‎src/content/partials/cloudflare-one/gateway/policies/dash-plus-api/http-block-applications.mdx‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
---
2+
{}
3+
---
4+
5+
import { Tabs, TabItem } from "~/components";
6+
7+
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
8+
9+
| Selector | Operator | Value | Action |
10+
| ----------- | -------- | ------------------------- | ------ |
11+
| Application | in | _Artificial Intelligence_ | Block |
12+
13+
</TabItem>
14+
<TabItem label="API">
15+
16+
```bash
17+
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/gateway/rule \
18+
--header "Content-Type: application/json" \
19+
--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
20+
--data '{
21+
"name": "Block content categories",
22+
"description": "Block access to unauthorized AI applications",
23+
"enabled": true,
24+
"action": "block",
25+
"filters": [
26+
"http"
27+
],
28+
"traffic": "any(app.type.ids[*] in {25})",
29+
"identity": "",
30+
"device_posture": ""
31+
}'
32+
```
33+
34+
</TabItem>
35+
</Tabs>

‎src/content/partials/learning-paths/zero-trust/blocklist-application.mdx‎

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,7 @@
11
---
22
{}
3-
43
---
54

6-
import { GlossaryTooltip } from "~/components"
7-
8-
Block unauthorized applications to limit your users' access to certain web-based tools and minimize the risk of <GlossaryTooltip term="shadow IT" link="https://www.cloudflare.com/learning/access-management/what-is-shadow-it/">shadow IT</GlossaryTooltip>. For example, the following policy blocks popular AI chatbots.
5+
import { GlossaryTooltip } from "~/components";
96

10-
| Selector | Operator | Value | Action |
11-
| ----------- | -------- | ----------------------------------------------- | ------ |
12-
| Application | in | *Microsoft Copilot*, *ChatGPT*, *Google Gemini* | Block |
7+
Block unauthorized applications to limit your users' access to certain web-based tools and minimize the risk of <GlossaryTooltip term="shadow IT" link="https://www.cloudflare.com/learning/access-management/what-is-shadow-it/">shadow IT</GlossaryTooltip>. For example, the following policy blocks known AI tools:

0 commit comments

Comments
 (0)