You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/partials/cloudflare-one/gateway/get-started/create-dns-policy.mdx
+13-5Lines changed: 13 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,13 +29,13 @@ To create a new DNS policy:
29
29
| ------- | ---------- | ---------- |
30
30
| Account | Zero Trust | Edit |
31
31
32
-
2. (Optional) Configure your API environment variables to include your [account ID](/fundamentals/setup/find-account-and-zone-ids/), email address, and API token.
32
+
2. (Optional) Configure your API environment variables to include your [account ID](/fundamentals/setup/find-account-and-zone-ids/) and API token.
33
33
3. Send a `POST` request to the [Create a Zero Trust Gateway rule](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) endpoint. For example, we recommend adding a policy to block all [security categories](/cloudflare-one/policies/gateway/domain-categories/#security-categories):
Copy file name to clipboardExpand all lines: src/content/partials/cloudflare-one/gateway/get-started/create-http-policy.mdx
+19-11Lines changed: 19 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -38,44 +38,52 @@ To create a new HTTP policy:
38
38
| ------- | ---------- | ---------- |
39
39
| Account | Zero Trust | Edit |
40
40
41
-
2. (Optional) Configure your API environment variables to include your [account ID](/fundamentals/setup/find-account-and-zone-ids/), email address, and API token.
41
+
2. (Optional) Configure your API environment variables to include your [account ID](/fundamentals/setup/find-account-and-zone-ids/) and API token.
42
42
3. Send a `POST` request to the [Create a Zero Trust Gateway rule](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) endpoint. For example, if you have enabled TLS decryption, some applications that use [embedded certificates](/cloudflare-one/policies/gateway/http-policies/tls-decryption/#inspection-limitations) may not support HTTP inspection, such as some Google products. You can create a policy to bypass inspection for these applications:
"description": "Bypass TLS decryption for unsupported applications",
51
51
"precedence": 0,
52
52
"enabled": true,
53
53
"action": "off",
54
54
"filters": [
55
-
"http"
55
+
"http"
56
56
],
57
57
"traffic": "any(app.type.ids[*] in {16})",
58
58
"identity": "",
59
59
"device_posture": ""
60
60
}'
61
61
```
62
62
63
-
If Gateway successfully created the policy, the API will respond with a `success` value of `true`.
63
+
```sh output
64
+
{
65
+
"success": true,
66
+
"errors": [],
67
+
"messages": []
68
+
}
69
+
```
70
+
71
+
The API will respond with a summary of the policy and the result of your request.
64
72
65
73
Cloudflare also recommends adding a policy to block [known threats](/cloudflare-one/policies/gateway/domain-categories/#security-categories) such as Command & Control, Botnet and Malware based on Cloudflare's threat intelligence:
Copy file name to clipboardExpand all lines: src/content/partials/cloudflare-one/gateway/get-started/create-network-policy.mdx
+13-5Lines changed: 13 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -29,13 +29,13 @@ To create a new network policy:
29
29
| ------- | ---------- | ---------- |
30
30
| Account | Zero Trust | Edit |
31
31
32
-
2. (Optional) Configure your API environment variables to include your [account ID](/fundamentals/setup/find-account-and-zone-ids/), email address, and API token.
32
+
2. (Optional) Configure your API environment variables to include your [account ID](/fundamentals/setup/find-account-and-zone-ids/) and API token.
33
33
3. Send a `POST` request to the [Create a Zero Trust Gateway rule](/api/operations/zero-trust-gateway-rules-create-zero-trust-gateway-rule) endpoint. For example, you can use a list of [device serial numbers](/cloudflare-one/identity/devices/warp-client-checks/corp-device/) to ensure users can only access an application if they connect with the WARP client from a company device:
0 commit comments