@@ -54,14 +54,14 @@ Gateway enforces global DNS and resolver policies before any other policies. Thi
5454
5555## Network proxy policies
5656
57- | Name | ID | Criteria | Value | Action | Description |
58- | --------------------------------------------------- | -------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ | --------------------------------------------------------------------------------------------------------------------------------------------- |
59- | Allow CF Network Error Logging L4 | ` 00000001-e4af-4b82-8f8c-c79c1d5d212e ` | Hostname | ` *.nel.cloudflare.com ` | allow | Allows SNI domains for WARP registration. |
60- | Allow CF Client | ` 00000001-8c3d-4e27-a01b-af8418000077 ` | Hostname | ` *.cloudflareclient.com ` and ` *.fed.cloudflareclient.com ` | allow | Allows Zero Trust client. |
61- | Allow Gateway Proxy PAC | ` 00000001-776e-438d-9856-987d7053762b ` | Hostname | ` *.cloudflare-gateway.com ` and ` *.fed.cloudflare-gateway.com ` | allow | Allows Gateway proxy with [ PAC files] ( /cloudflare-one/connections/connect-devices/agentless/pac-files/ ) . |
62- | Allow Zero Trust Services | ` 00000001-e1e8-421b-a0fe-895397489f28 ` | Hostname | ` dash.teams.cloudflare.com ` , ` help.teams.cloudflare.com ` , ` blocked.teams.cloudflare.com ` , ` blocked.teams.fed.cloudflare.com ` , ` api.cloudflare.com ` , ` api.fed.cloudflare.com ` , ` cloudflarestatus.com ` , ` www.cloudflarestatus.com ` , ` one.dash.cloudflare.com ` , ` one.dash.fed.cloudflare.com ` , and ` help.one.cloudflare.com ` | allow | Allows Cloudflare Zero Trust services. |
63- | Allow Access Apps L4 | ` 00000001-daa2-41e2-8a88-698af4066951 ` | Hostname | ` *.cloudflareaccess.com ` and ` *.fed.cloudflareaccess.com ` | allow | Allows [ Cloudflare Access] ( /cloudflare-one/policies/access/ ) applications. |
64- | Allow HTTP requests to browser-rendered Access Apps | ` 00000001-1f93-4476-8f92-9aa4407d1c5f ` | Hostname | ` *.zero-trust-apps.cfdata.org ` , ` *.zero-trust-apps-staging.cfdata.org ` , ` *.zero-trust-apps.fed.cfdata.org ` , or ` *.zero-trust-apps-staging.fed.cfdata.org ` | allow | Allows Cloudflare Access terminal applications [ rendered in a browser] ( /cloudflare-one/applications/non-http/browser-rendering/#ssh-and-vnc ) . |
57+ | Name | ID | Criteria | Value | Action | Description |
58+ | --------------------------------------------------- | -------------------------------------- | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ | --------------------------------------------------------------------------------------------------------------------------------------------- |
59+ | Allow CF Network Error Logging L4 | ` 00000001-e4af-4b82-8f8c-c79c1d5d212e ` | Hostname | ` *.nel.cloudflare.com ` | allow | Allows SNI domains for WARP registration. |
60+ | Allow CF Client | ` 00000001-8c3d-4e27-a01b-af8418000077 ` | Hostname | ` *.cloudflareclient.com ` and ` *.fed.cloudflareclient.com ` | allow | Allows Zero Trust client. |
61+ | Allow Gateway Proxy PAC | ` 00000001-776e-438d-9856-987d7053762b ` | Hostname | ` *.cloudflare-gateway.com ` and ` *.fed.cloudflare-gateway.com ` | allow | Allows Gateway proxy with [ PAC files] ( /cloudflare-one/connections/connect-devices/agentless/pac-files/ ) . |
62+ | Allow Zero Trust Services | ` 00000001-e1e8-421b-a0fe-895397489f28 ` | Hostname | ` dash.teams.cloudflare.com ` , ` help.teams.cloudflare.com ` , ` blocked.teams.cloudflare.com ` , ` blocked.teams.fed.cloudflare.com ` , ` api.cloudflare.com ` , ` api.fed.cloudflare.com ` , ` cloudflarestatus.com ` , ` www.cloudflarestatus.com ` , ` one.dash.cloudflare.com ` , ` one.dash.fed.cloudflare.com ` , ` help.one.cloudflare.com ` , ` dash.cloudflare.com ` , ` dash.fed.cloudflare.com ` , and ` developers .cloudflare.com` | allow | Allows Cloudflare Zero Trust services. |
63+ | Allow Access Apps L4 | ` 00000001-daa2-41e2-8a88-698af4066951 ` | Hostname | ` *.cloudflareaccess.com ` and ` *.fed.cloudflareaccess.com ` | allow | Allows [ Cloudflare Access] ( /cloudflare-one/policies/access/ ) applications. |
64+ | Allow HTTP requests to browser-rendered Access Apps | ` 00000001-1f93-4476-8f92-9aa4407d1c5f ` | Hostname | ` *.zero-trust-apps.cfdata.org ` , ` *.zero-trust-apps-staging.cfdata.org ` , ` *.zero-trust-apps.fed.cfdata.org ` , or ` *.zero-trust-apps-staging.fed.cfdata.org ` | allow | Allows Cloudflare Access terminal applications [ rendered in a browser] ( /cloudflare-one/applications/non-http/browser-rendering/#ssh-and-vnc ) . |
6565
6666## HTTP inspection policies
6767
0 commit comments