Skip to content

Commit 925a35d

Browse files
committed
Add instructions for old nav
1 parent b3761f3 commit 925a35d

File tree

1 file changed

+63
-1
lines changed

1 file changed

+63
-1
lines changed

src/content/docs/waf/detections/firewall-for-ai/get-started.mdx

Lines changed: 63 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,20 +55,58 @@ Once you have [onboarded your domain](/fundamentals/manage-domains/add-site/) to
5555

5656
Save the relevant endpoint receiving LLM-related traffic to [Endpoint Management](/api-shield/management-and-monitoring/endpoint-management/) once it has been discovered, or add the endpoint manually.
5757

58+
<Tabs syncKey="dashNewNav"> <TabItem label="Old dashboard">
59+
60+
<Steps>
61+
62+
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/login), and select your account and domain.
63+
2. Go to **Security** > **API Shield**.
64+
3. Go to the **Discovery** tab.
65+
4. Find the endpoint receiving requests with LLM prompts in the list and select **Save** next to the endpoint.
66+
67+
</Steps>
68+
69+
</TabItem> <TabItem label="New dashboard" icon="rocket">
70+
71+
<Steps>
72+
5873
1. In the Cloudflare dashboard, go to the **Web assets** page.
5974

6075
<DashButton url="/?to=/:account/:zone/security/web-assets" />
6176

6277
2. Go to the **Discovery** tab.
6378
3. Find the endpoint receiving requests with LLM prompts in the list and select **Save** next to the endpoint.
6479

80+
</Steps>
81+
82+
</TabItem> </Tabs>
83+
6584
If you did not find the endpoint in the **Discovery** tab, you can add it manually:
6685

86+
<Tabs syncKey="dashNewNav"> <TabItem label="Old dashboard">
87+
88+
<Steps>
89+
90+
1. Go to the **Endpoint Management** tab.
91+
2. Select **Add endpoints** > **Manually add**.
92+
3. Choose the method from the dropdown menu and add the path and hostname for the endpoint.
93+
4. Select **Add endpoints**.
94+
95+
</Steps>
96+
97+
</TabItem> <TabItem label="New dashboard" icon="rocket">
98+
99+
<Steps>
100+
67101
1. Go to the **Endpoints** tab.
68102
2. Select **Add endpoints** > **Manually add**.
69103
3. Choose the method from the dropdown menu and add the path and hostname for the endpoint.
70104
4. Select **Add endpoints**.
71105

106+
</Steps>
107+
108+
</TabItem> </Tabs>
109+
72110
In the context of this guide, consider an example endpoint with the following properties:
73111

74112
- Method: `POST`
@@ -81,17 +119,37 @@ You must [label endpoints](/api-shield/management-and-monitoring/endpoint-labels
81119

82120
Add the `cf-llm` label to the endpoint you added:
83121

122+
<Tabs syncKey="dashNewNav"> <TabItem label="Old dashboard">
123+
124+
<Steps>
125+
126+
<Render
127+
file="labels-add-old-nav"
128+
product="api-shield"
129+
params={{ labelName: "cf-llm" }}
130+
/>
131+
132+
</Steps>
133+
134+
</TabItem> <TabItem label="New dashboard" icon="rocket">
135+
136+
<Steps>
137+
84138
<Render
85139
file="labels-add"
86140
product="api-shield"
87141
params={{ labelName: "cf-llm" }}
88142
/>
89143

144+
</Steps>
145+
146+
</TabItem> </Tabs>
147+
90148
Once you add a label to the endpoint, Cloudflare will start labeling incoming traffic for the endpoint with the label you selected.
91149

92150
## 4. (Optional) Generate API traffic
93151

94-
You may need to issue some `POST` requests to the endpoint so that there is some labeled traffic to analyze in this step.
152+
You may need to issue some `POST` requests to the endpoint so that there is some labeled traffic to review in the following step.
95153

96154
For example, send a `POST` request to the API endpoint you previously added (`/v1/messages` in this example) in your zone with an LLM prompt requesting PII:
97155

@@ -107,6 +165,8 @@ The PII category for this request would be `EMAIL_ADDRESS`.
107165

108166
Use [Security Analytics](/waf/analytics/security-analytics/) in the new application security dashboard to validate that the WAF is correctly labeling traffic for the endpoint.
109167

168+
<Steps>
169+
110170
1. In the Cloudflare dashboard, go to the **Analytics** page.
111171

112172
<DashButton url="/?to=/:account/:zone/security/analytics" />
@@ -128,6 +188,8 @@ Use [Security Analytics](/waf/analytics/security-analytics/) in the new applicat
128188

129189
The displayed logs now refer to incoming requests where personally identifiable information (PII) was detected in an LLM prompt.
130190

191+
</Steps>
192+
131193
Alternatively, you can also create a custom rule with a _Log_ action (only available on Enterprise plans) to check for potentially harmful traffic related to LLM prompts. This rule will generate [security events](/waf/analytics/security-events/) that will allow you to validate your Firewall For AI configuration.
132194

133195
## 6. Mitigate harmful requests

0 commit comments

Comments
 (0)