Skip to content

Commit b74ab51

Browse files
[CF1] warp tb guide ai additions (#25198)
* [CF1] warp tb guide ai additions * lowercase s in server * Apply suggestions from code review
1 parent 4b31f5a commit b74ab51

File tree

2 files changed

+50
-35
lines changed

2 files changed

+50
-35
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide.mdx

Lines changed: 49 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,17 @@ This guide helps you diagnose and resolve common issues with the Cloudflare WARP
1515
4. **Fix common misconfigurations**: [Profile mismatch](#wrong-profile-id), [split tunnel issues](#wrong-split-tunnel-configuration), [managed network issues](#review-your-managed-network-settings), [user group mismatch](#check-a-users-group-membership).
1616
5. **File a support ticket**: [How to file a ticket](#5-file-a-support-ticket) after you have exhausted your troubleshooting options.
1717

18+
:::note[AI-assisted troubleshooting]
19+
20+
Cloudflare One includes two free AI helpers to speed up WARP investigations:
21+
22+
[**WARP Diagnostics Analyzer**](/cloudflare-one/connections/connect-devices/warp/troubleshooting/warp-logs/#warp-diagnostics-analyzer-beta) - Uses AI to parse a device’s WARP diagnostic log and summarizes key events, likely causes, and recommended next steps in a concise summary. This analyzer is available for logs collected via the dashboard.
23+
24+
25+
[**DEX MCP server**](/cloudflare-one/insights/dex/dex-mcp-server/) — An AI tool that allows customers to ask a question like, "Show me the connectivity and performance metrics for the device used by carly‌@acme.com", and receive an answer that contains data from the DEX API.
26+
27+
:::
28+
1829
## 1. Before you start
1930

2031
### Prerequisites
@@ -29,21 +40,19 @@ Many troubleshooting issues are caused by outdated client versions. For the best
2940

3041
After updating the WARP client, monitor the issue to see if it recurs. If the issue persists, continue with the troubleshooting guide.
3142

32-
:::tip[Check the device's WARP version]
33-
34-
Via the device:
43+
#### Via the device
3544

3645
1. Open the WARP GUI on the desktop.
3746
2. Select the gear icon.
3847
3. Select **About WARP**.
48+
4. Compare your device's version with the [latest version of WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/).
3949

40-
Via the Zero Trust dashboard:
50+
#### Via the Zero Trust dashboard
4151

4252
1. Log into [Zero Trust](https://one.dash.cloudflare.com/) > go to **My Team** > **Devices**.
4353
2. Select the device you want to investigate.
4454
3. Find the device's WARP version under **Client version** in the side menu.
45-
46-
:::
55+
4. Compare your device's version with the [latest version of WARP](/cloudflare-one/connections/connect-devices/warp/download-warp/).
4756

4857
### WARP basics
4958

@@ -86,15 +95,15 @@ You can collect diagnostic logs in two ways: the [Cloudflare dashboard](#option-
8695

8796
Collect WARP diagnostic logs remotely from the Zero Trust dashboard by using Digital Experience Monitoring's (DEX) remote captures.
8897

89-
#### Start a remote capture
90-
9198
:::tip[Best practice]
9299

93100
To troubleshoot effectively, Cloudflare recommends reproducing the issue and noting your timestamps immediately before collecting logs. Though recreating the issue may not be possible in all cases, reproducing the issue right before WARP diag collection or during the window that a packet capture (PCAP) is running will help you troubleshoot with greater visibility.
94101

95102
Refer to [WARP log retention window](/cloudflare-one/connections/connect-devices/warp/troubleshooting/warp-logs/#log-retention-window) to learn more.
96103
:::
97104

105+
#### Start a remote capture
106+
98107
<Render
99108
file="dex/pcaps-run"
100109
product="cloudflare-one"
@@ -114,6 +123,20 @@ Refer to [WARP log retention window](/cloudflare-one/connections/connect-devices
114123

115124
After you have your diagnostic files, go to [Review key files](/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide/#3-review-key-files) to continue troubleshooting.
116125

126+
:::tip[AI-assisted troubleshooting]
127+
128+
The [WARP Diagnostics Analyzer](/cloudflare-one/connections/connect-devices/warp/troubleshooting/warp-logs/#warp-diagnostics-analyzer-beta) uses AI to parse a device’s WARP diagnostic log and summarizes key events, likely causes, and recommended next steps in a concise summary.
129+
130+
After you run a [DEX remote capture](#option-a-collect-logs-via-the-cloudflare-dashboard) for WARP diagnostics:
131+
132+
1. Go to **DEX** > **Remote captures**.
133+
2. Find your capture in the list of captures.
134+
3. Select the three-dot icon next to **Status** > select **View WARP Diag** to generate an AI summary.
135+
136+
This analyzer is available for logs collected via the dashboard.
137+
138+
:::
139+
117140
### Option B: Collect logs via the CLI
118141

119142
Collect WARP diagnostic logs on your desktop using the `warp-diag` CLI.
@@ -247,7 +270,7 @@ Exclude mode, with hosts/ips:
247270
cname.user.net
248271
```
249272

250-
:::tip[Exclude mode versus Include mode]
273+
:::note[Exclude mode versus Include mode]
251274
`Exclude mode` means all traffic will be sent through the WARP tunnel except for the IPs and domains you specify.
252275

253276
`Include mode` means only traffic destined to the IPs or domains you specify will be sent through the WARP tunnel.
@@ -314,20 +337,6 @@ To verify that WARP is configured and working properly, review the following:
314337

315338
A profile ID is a unique identifier assigned to each [device profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/) in the Zero Trust dashboard, used to determine which configuration settings apply to a device.
316339

317-
If your organization has multiple device profiles defined in the Zero Trust dashboard, a device may be matched to an unexpected profile because:
318-
319-
1. How profile precedence is configured.
320-
321-
:::note[WARP evaluates profile IDs in the order they appear in the dashboard]
322-
323-
<Render file="warp/device-profile-order-of-precedence" product="cloudflare-one" />
324-
325-
:::
326-
327-
2. [Managed network](#review-your-managed-network-settings) issues.
328-
3. User group [mismatch](#check-a-users-group-membership).
329-
4. Lack of [precise match rules](#edit-your-device-profile-match-rules).
330-
331340
#### Check the applied device profile
332341

333342
To check that the applied device profile is the intended device profile:
@@ -336,19 +345,19 @@ To check that the applied device profile is the intended device profile:
336345
2. Find and select the device profile intended for the device.
337346
3. Under **Profile details**, compare the displayed **Profile ID** with the `Profile ID` in the `warp-settings.txt` file.
338347

339-
If the profile ID displayed in the `warp-settings.txt` file does not match the intended device profile's ID shown in the dashboard:
348+
If your organization has multiple device profiles defined in the Zero Trust dashboard, a device may be matched to an unexpected profile because:
340349

341-
1. If you are using a managed network, review your [managed network settings](/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide/#review-your-managed-network-settings) for common errors.
342-
2. [Edit your device profile's match rules](/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide/#edit-your-device-profile-match-rules) in the intended profile to make them more specific (for example, by adding identity-based [selectors](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#selectors) like [`email`](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#user-email), or [`group name`](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#user-group-names).)
350+
- How [profile precedence](#review-profile-precedence) is configured.
351+
- [Managed network](#review-your-managed-network-settings) issues (if you are using a managed network.)
352+
- User group [mismatch](#check-a-users-group-membership).
353+
- Lack of [precise match rules](#edit-your-device-profile-match-rules).
343354

344-
:::caution
345-
Avoid [reordering profiles](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#order-of-precedence) unless you are confident it will not affect other users.
346-
:::
355+
#### Review profile precedence
347356

348-
:::note
349-
350-
Identity-based selectors are only available if the user [enrolled the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) by logging in to an identity provider (IdP).
357+
<Render file="warp/device-profile-order-of-precedence" product="cloudflare-one" />
351358

359+
:::caution
360+
Avoid [reordering profiles](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/#order-of-precedence) unless you are confident it will not affect other users.
352361
:::
353362

354363
#### Review your managed network settings
@@ -398,6 +407,12 @@ To modify the match rules of a device profile, you will need to edit the device
398407

399408
<Render file="warp/edit-profile-settings" product="cloudflare-one" />
400409

410+
:::note
411+
412+
Identity-based selectors are only available if the user [enrolled the device](/cloudflare-one/connections/connect-devices/warp/deployment/manual-deployment/) by logging in to an identity provider (IdP).
413+
414+
:::
415+
401416
### Wrong split tunnel configuration
402417

403418
<Render file="warp/split-tunnel-intro" product="cloudflare-one" />
@@ -412,7 +427,7 @@ After downloading the WARP diagnostic logs, review that your configuration is wo
412427

413428
1. Open the `warp-settings.txt` file and find `Exclude mode, with hosts/ips:` or `Include mode, with hosts/ips:`.
414429

415-
:::tip[Exclude mode versus Include mode]
430+
:::note[Exclude mode versus Include mode]
416431
`Exclude mode` means all traffic will be sent through the WARP tunnel except for the IPs and domains you specify.
417432

418433
`Include mode` means only traffic destined to the IPs or domains you specify will be sent through the WARP tunnel.
@@ -438,7 +453,7 @@ Both methods update the client with the latest configuration.
438453

439454
On the end user device, open the WARP GUI and toggle WARP on and off.
440455

441-
:::tip[What if the end user cannot turn off WARP?]
456+
:::note[What if the end user cannot turn off WARP?]
442457
If the end user's [WARP switch](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#lock-warp-switch) is locked, they will need an [admin override code](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#admin-override) to be able to toggle the WARP switch.
443458

444459
[Resetting the encryption keys](#option-b-reset-the-encryption-keys) may be a faster solution.

src/content/docs/cloudflare-one/insights/dex/dex-mcp-server.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
pcx_content_type: reference
3-
title: DEX MCP Server
3+
title: DEX MCP server
44
sidebar:
55
order: 8
66
---

0 commit comments

Comments
 (0)