Skip to content

Commit b2b41a4

Browse files
committed
[Page Shield] Scoped alerts also for log policies
1 parent 8ff9bf6 commit b2b41a4

File tree

1 file changed

+5
-10
lines changed

1 file changed

+5
-10
lines changed

src/content/docs/page-shield/alerts/index.mdx

Lines changed: 5 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -24,10 +24,6 @@ You can configure unscoped or scoped alerts:
2424

2525
- **Scoped alert**: An alert scoped to one or more zones. You must configure [policies](/page-shield/policies/) for the zones you select to receive any notifications. Scoped alerts are triggered immediately. Policy violations will not trigger an alert. For more information, refer to [Scoped alerts](#scoped-alerts).
2626

27-
:::note
28-
Cloudflare only takes into account [policies in allow mode](/page-shield/policies/#policy-actions) for scoped alerts.
29-
:::
30-
3127
For alerts sent at regular intervals, you might experience a delay between adding a new script and receiving an alert.
3228

3329
For instructions on configuring alerts, refer to [Configure an alert](/page-shield/alerts/configure/).
@@ -38,27 +34,26 @@ For instructions on configuring alerts, refer to [Configure an alert](/page-shie
3834
Applies to Enterprise customers with a paid add-on.
3935
:::
4036

41-
If you have configured [allow policies](/page-shield/policies/#policy-actions) in a zone — policies which allow specific scripts and connections and block everything else — you can filter alert notifications according to those policies. These alerts are called scoped alerts.
37+
If you have configured [policies](/page-shield/policies/) in a zone, you can filter alert notifications according to those policies. These alerts are called scoped alerts.
4238

43-
When you create a scoped alert using the **Policies of these zones** alert filter, you will only receive the most relevant notifications based on the values of the allow policies you configured.
39+
When you create a scoped alert using the **Policies of these zones** alert filter, you will only receive the most relevant notifications based on the policies you configured.
4440

4541
For each scoped alert, Cloudflare does the following:
4642

47-
1. Check which allow policies in a zone are enabled.
43+
1. Check which policies in a zone are enabled, either in allow or in log mode.
4844
2. For every enabled policy, compare the URL of the new or changed resource against the allowed sources in the policy.
4945
3. If the resource is allowed by the policy, check if the new or modified resource should trigger the current alert.
5046
4. If the alert should trigger, send an alert notification to the configured destinations.
5147

52-
When you create a scoped alert you will not receive notifications for resources blocked by an allow policy. These are [policy violations](/page-shield/policies/violations/) that you can review in the dashboard, through GraphQL, or via Logpush.
48+
When you create a scoped alert you will not receive notifications for resources that are not allowed by a policy (either [in allow or in log mode](/page-shield/policies/#policy-actions)). These are [policy violations](/page-shield/policies/violations/) that you can review in the dashboard, through GraphQL, or via Logpush.
5349

5450
:::note
5551

5652
You will not receive notifications for a scoped alert in the following cases:
5753

5854
- No configured policies in the zone
59-
- Policy configured in log mode
6055
- Policy is not enabled
6156

6257
:::
6358

64-
For unscoped alerts, you will receive alerts for resources detected in all your zones, and you may receive alerts about resources that are blocked by one of your configured allow policies.
59+
For unscoped alerts, you will receive alerts for resources detected in all your zones, and you may receive alerts about resources that violate your configured policies.

0 commit comments

Comments
 (0)