|
5 | 5 | order: 3 |
6 | 6 | --- |
7 | 7 |
|
8 | | -import { Details, InlineBadge, Render } from "~/components"; |
| 8 | +import { Details, InlineBadge, Render, Badge } from "~/components"; |
9 | 9 |
|
10 | 10 | :::note |
11 | 11 | To enable this feature, download and deploy the [WARP client](/cloudflare-one/connections/connect-devices/warp/deployment/) on your devices. |
@@ -83,7 +83,7 @@ Policies with Allow actions allow network traffic to reach certain IPs or ports. |
83 | 83 | | Destination IP | in | `92.100.02.102` | And | Allow | |
84 | 84 | | Email | in | `*@example.com` | | | |
85 | 85 |
|
86 | | -### Audit SSH |
| 86 | +### Audit SSH <Badge text="Deprecated" variant="caution"/> |
87 | 87 |
|
88 | 88 | API value: `audit_ssh` |
89 | 89 |
|
@@ -117,17 +117,19 @@ API value: `audit_ssh` |
117 | 117 |
|
118 | 118 | </Details> |
119 | 119 |
|
| 120 | +:::caution |
| 121 | +Gateway no longer supports the Audit SSH action for new policies. To log your SSH traffic, Cloudflare recommends deploying [Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/) for your SSH server and configuring [SSH command logs](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/#ssh-command-logs). |
| 122 | +::: |
| 123 | + |
120 | 124 | Policies with Audit SSH actions allow administrators to log SSH traffic. Gateway will detect SSH traffic over port `22`. For example, the following configuration logs SSH commands sent to a given IP address: |
121 | 125 |
|
122 | 126 | | Selector | Operator | Value | Action | |
123 | 127 | | -------------- | -------- | -------------- | --------- | |
124 | 128 | | Destination IP | in | `203.0.113.83` | Audit SSH | |
125 | 129 |
|
126 | | -For more information on SSH logging, refer to [Configure SSH proxy and command logs](/cloudflare-one/policies/gateway/network-policies/ssh-logging/). |
127 | | - |
128 | | -:::note |
129 | 130 | Gateway only audits SSH traffic over port `22`. Non-standard ports, including those specified with the [Destination Port selector](#destination-port), are not supported. |
130 | | -::: |
| 131 | + |
| 132 | +For more information on SSH logging, refer to [Configure SSH proxy and command logs](/cloudflare-one/policies/gateway/network-policies/ssh-logging/). |
131 | 133 |
|
132 | 134 | ### Block |
133 | 135 |
|
|
0 commit comments