|
1 | 1 | --- |
2 | 2 | pcx_content_type: changelog |
3 | 3 | title: Gateway |
4 | | -release_notes_file_name: |
5 | | - - gateway |
6 | 4 | head: |
7 | 5 | - tag: title |
8 | 6 | content: Gateway Changelog |
9 | 7 | description: Review recent changes to Cloudflare Gateway. |
10 | | - |
11 | 8 | --- |
12 | 9 |
|
13 | | -import { ProductReleaseNotes, Render } from "~/components" |
| 10 | +import { ProductChangelog } from "~/components"; |
| 11 | + |
| 12 | +{/* <!-- All changelog entries live in src/content/changelogs/gateway/. */} |
| 13 | + |
| 14 | +<ProductChangelog product="gateway" hideEntry="2024-06-16-cloudflare-one" /> |
| 15 | + |
| 16 | +## 2025-02-12 |
| 17 | + |
| 18 | +**Upload/Download File Size selectors for HTTP policies** |
| 19 | + |
| 20 | +Gateway and DLP users can now create HTTP policies with the [Download and Upload File Size (MiB)](/cloudflare-one/policies/gateway/http-policies/#download-and-upload-file-size) traffic selectors. This update allows users to block uploads or downloads based on file size. |
| 21 | + |
| 22 | +## 2025-02-02 |
| 23 | + |
| 24 | +**The default global Cloudflare root certificate expired on 2025-02-02 at 16:05 UTC** |
| 25 | + |
| 26 | +If you installed the default Cloudflare certificate before 2024-10-17, you must generate a new certificate and activate it for your Zero Trust organization to avoid inspection errors. Refer to [Troubleshooting](/cloudflare-one/faq/troubleshooting/#as-of-february-2-2025-my-end-user-devices-browser-is-returning-a-your-connection-is-not-private-warning) for instructions and troubleshooting steps. |
| 27 | + |
| 28 | +## 2025-01-08 |
| 29 | + |
| 30 | +**Bring your own resolver IP (BYOIP) for DNS locations** |
| 31 | + |
| 32 | +Enterprise users can now [provide an IP address](/cloudflare-one/connections/connect-devices/agentless/dns/locations/dns-resolver-ips/#bring-your-own-dns-resolver-ip) for a private DNS resolver to use with [DNS locations](/cloudflare-one/connections/connect-devices/agentless/dns/locations/). Gateway supports bringing your own IPv4 and IPv6 addresses. |
| 33 | + |
| 34 | +## 2024-11-20 |
| 35 | + |
| 36 | +**Category filtering in the network policy builder** |
| 37 | + |
| 38 | +Gateway users can now create network policies with the [Content Categories](/cloudflare-one/policies/gateway/network-policies/#content-categories) and [Security Risks](/cloudflare-one/policies/gateway/network-policies/#security-risks) traffic selectors. This update simplifies malicious traffic blocking and streamlines network monitoring for improved security management. |
| 39 | + |
| 40 | +## 2024-10-17 |
| 41 | + |
| 42 | +**Per-account Cloudflare root certificate** |
| 43 | + |
| 44 | +Gateway users can now generate [unique root CAs](/cloudflare-one/connections/connect-devices/user-side-certificates/) for their Zero Trust account. Both generated certificate and custom certificate users must [activate a root certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/#activate-a-root-certificate) to use it for inspection. Per-account certificates replace the default Cloudflare certificate, which is set to expire on 2025-02-02. |
| 45 | + |
| 46 | +## 2024-10-10 |
| 47 | + |
| 48 | +**Time-based policy duration** |
| 49 | + |
| 50 | +Gateway now offers [time-based DNS policy duration](/cloudflare-one/policies/gateway/dns-policies/timed-policies/#time-based-policy-duration). With policy duration, you can configure a duration of time for a policy to turn on or set an exact date and time to turn a policy off. |
| 51 | + |
| 52 | +## 2024-10-04 |
| 53 | + |
| 54 | +**Expanded Gateway log fields** |
| 55 | + |
| 56 | +Gateway now offers new fields in [activity logs](/cloudflare-one/insights/logs/gateway-logs/) for DNS, network, and HTTP policies to provide greater insight into your users' traffic routed through Gateway. |
| 57 | + |
| 58 | +## 2024-09-30 |
| 59 | + |
| 60 | +**File sandboxing** |
| 61 | + |
| 62 | +Gateway users on Enterprise plans can create HTTP policies with [file sandboxing](/cloudflare-one/policies/gateway/http-policies/file-sandboxing/) to quarantine previously unseen files downloaded by your users and scan them for malware. |
| 63 | + |
| 64 | +## 2024-07-30 |
| 65 | + |
| 66 | +**UK NCSC indicator feed publicly available in Gateway** |
| 67 | + |
| 68 | +Gateway users on any plan can now use the [PDNS threat intelligence feed](/security-center/indicator-feeds/#publicly-available-feeds) provided by the UK National Cyber Security Centre (NCSC) in DNS policies. |
| 69 | + |
| 70 | +## 2024-07-14 |
| 71 | + |
| 72 | +**Gateway DNS filter non-authenticated queries** |
| 73 | + |
| 74 | +Gateway users can now select which endpoints to use for a given DNS location. Available endpoints include IPv4, IPv6, DNS over HTTPS (DoH), and DNS over TLS (DoT). Users can protect each configured endpoint by specifying allowed source networks. Additionally, for the DoH endpoint, users can filter traffic based on source networks and/or authenticate user identity tokens. |
| 75 | + |
| 76 | +## 2024-06-25 |
| 77 | + |
| 78 | +**Gateway DNS policy setting to ignore CNAME category matches** |
| 79 | + |
| 80 | +Gateway now offers the ability to selectively ignore CNAME domain categories in DNS policies via the [**Ignore CNAME domain categories** setting](/cloudflare-one/policies/gateway/domain-categories/#ignore-cname-domain-categories) in the policy builder and the [`ignore_cname_category_matches` setting](/api/resources/zero_trust/subresources/gateway/subresources/rules/methods/create/) in the API. |
14 | 81 |
|
15 | | -<Render file="changelog-note" /> |
| 82 | +## 2024-04-05 |
16 | 83 |
|
17 | | -{/* <!-- All changelog entries live in src/content/changelogs/gateway.yaml. For more details, refer to https://developers.cloudflare.com/style-guide/documentation-content-strategy/content-types/changelog/#yaml-file --> */} |
| 84 | +**Gateway file type control improvements** |
18 | 85 |
|
19 | | -<ProductReleaseNotes /> |
| 86 | +Gateway now offers a more extensive, categorized [list of files](/cloudflare-one/policies/gateway/http-policies/#download-and-upload-file-types) to control uploads and downloads. |
0 commit comments