Merge branch 'production' into kian/PCX-15577

kodster28 · kodster28 · commit d6473110ef65 · 2025-05-15T12:52:57.000-05:00
diff --git a/public/__redirects b/public/__redirects
@@ -17,7 +17,8 @@
 /cloudflare-one/changelog/casb/index.xml /changelog/rss/casb.xml 301
 /cloudflare-one/changelog/dex/index.xml /changelog/rss/dex.xml 301
 /cloudflare-one/changelog/dlp/index.xml /changelog/rss/dlp.xml 301
-/cloudflare-one/changelog/email-security/index.xml /changelog/rss/email-security.xml 301
+/cloudflare-one/changelog/email-security/index.xml /changelog/rss/email-security-cf1.xml 301
+/changelog/rss/email-security.xml /changelog/rss/email-security-cf1.xml 301
 /cloudflare-one/changelog/gateway/index.xml /changelog/rss/gateway.xml 301
 /cloudflare-one/changelog/risk-score/index.xml /changelog/rss/risk-score.xml 301
 /cloudflare-one/changelog/tunnel/index.xml /changelog/rss/cloudflare-tunnel.xml 301
diff --git a/src/content/changelog/email-security-cf1/2024-12-19-reclassification-tab.mdx b/src/content/changelog/email-security-cf1/2024-12-19-reclassification-tab.mdx
diff --git a/src/content/changelog/email-security-cf1/2025-05-08-open-attachments-with-browser-isolation.mdx b/src/content/changelog/email-security-cf1/2025-05-08-open-attachments-with-browser-isolation.mdx
diff --git a/src/content/changelog/zero-trust-warp/2024-06-16-cloudflare-one.mdx b/src/content/changelog/zero-trust-warp/2024-06-16-cloudflare-one.mdx
@@ -8,7 +8,7 @@ products:
   - cloudflare-tunnel
   - dex
   - dlp
-  - email-security
+  - email-security-cf1
   - gateway
   - magic-cloud-networking
   - magic-firewall
diff --git a/src/content/docs/cloudflare-one/changelog/email-security.mdx b/src/content/docs/cloudflare-one/changelog/email-security.mdx
@@ -8,7 +8,7 @@ import { ProductChangelog } from "~/components";
 {/* <!-- All changelog entries live in src/content/changelogs/email-security/. */}
 
 <ProductChangelog
-	product="email-security"
+	product="email-security-cf1"
 	hideEntry="2024-06-16-cloudflare-one"
 />
 
diff --git a/src/content/docs/cloudflare-one/email-security/setup/pre-delivery-deployment/mx-inline-deployment-setup.mdx b/src/content/docs/cloudflare-one/email-security/setup/pre-delivery-deployment/mx-inline-deployment-setup.mdx
@@ -17,7 +17,7 @@ To set up MX/Inline:
 4. Select **MX/Inline**.
 5. To start the MX/Inline configuration, you will need to have completed the prerequisite setup on your email provider's platform. Once you have completed this step, select **I confirm that I have completed all the necessary requirements**. Then, select **Start configuration**.
 
-:::[note]
+:::note
 You can only onboard one domain at a time.
 :::
 
diff --git a/src/content/partials/cloudflare-one/email-security/deployment/mx-deployment-prerequisites.mdx b/src/content/partials/cloudflare-one/email-security/deployment/mx-deployment-prerequisites.mdx
@@ -8,6 +8,10 @@ To ensure changes made in this tutorial take effect quickly, update the Time to
 
 Changing the TTL value instructs DNS servers on how long to cache this value before requesting an update from the responsible nameserver. You need to change the TTL value before changing your MX records to Email Security. This will ensure that changes take effect quickly and can also be reverted quickly if needed. If your DNS manager does not allow for a TTL of five minutes, set it to the lowest possible setting.
 
+:::note
+Make TTL changes a few days before the production update, and wait at least as long as the old TTL values before making the update, since some senders might still be using the old cached values.
+:::
+
 To check your existing TTL, open a terminal window and run the following command against your domain:
 
 ```sh
diff --git a/src/content/products/email-security-cf1.yaml b/src/content/products/email-security-cf1.yaml
@@ -0,0 +1,9 @@
+name: Email Security
+
+product:
+  title: Email Security
+  url: /cloudflare-one/email-security/
+  group: Cloudflare One
+
+meta:
+  description: Cloudflare Email Security is a cloud based service that stops phishing attacks, the biggest cybersecurity threat, across all traffic vectors - email, web and network.
diff --git a/src/content/products/email-security.yaml b/src/content/products/email-security.yaml
@@ -2,14 +2,11 @@ name: Email Security
 
 product:
   title: Email Security (formerly Area 1)
-  url: /cloudflare-one/email-security/
+  url: /email-security/
   group: Cloudflare One
+  show: false
 
 meta:
   title: Cloudflare Email Security (formerly Area 1) docs
   description: Cloudflare Email Security is a cloud based service that stops phishing attacks, the biggest cybersecurity threat, across all traffic vectors - email, web and network.
   author: "@cloudflare"
-
-resources:
-  dashboard_link: https://dash.cloudflare.com/?to=/:account/:zone/email/security
-  learning_center: https://www.cloudflare.com/learning/email-security/what-is-email-security/
diff --git a/src/content/products/firewall.yaml b/src/content/products/firewall.yaml
@@ -5,6 +5,7 @@ product:
   url: /firewall/
   wrap: true
   group: Application security
+  show: false
 
 meta:
   title: Cloudflare Firewall Rules (deprecated) docs
diff --git a/src/content/warp-releases/windows/ga/2025.4.929.0.yaml b/src/content/warp-releases/windows/ga/2025.4.929.0.yaml
@@ -0,0 +1,35 @@
+releaseNotes: |-
+  This release contains two significant changes all customers should be aware of:
+  1. All DNS traffic now flows inside the WARP tunnel. Customers are no longer required to configure their local firewall rules to allow our [DoH IP addresses and domains](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#doh-ip).
+  2. When using MASQUE, the connection will fall back to HTTP/2 (TCP) when we detect that HTTP/3 traffic is blocked. This allows for a much more reliable connection on some public WiFi networks.
+
+  **Changes and improvements**
+  - Fixed an issue causing reconnection loops when captive portals are detected.
+  - Fixed an issue that caused WARP client disk encryption posture checks to fail due to missing drive names.
+  - Fixed an issue where managed network policies could incorrectly report network location beacons as missing.
+  - Improved DEX test error reporting.
+  - Fixed an issue where some parts of the WARP Client UI were missing in high contrast mode.
+  - Fixed an issue causing client notifications to fail in IPv6 only environments which prevented the client from receiving configuration changes to settings like device profile.
+  - Added a TCP fallback for the MASQUE tunnel protocol to improve connectivity on networks that block UDP or HTTP/3 specifically.
+  - Added new IP addresses for [tunnel connectivity checks](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#connectivity-checks). If your organization uses a firewall or other policies you will need to exempt these IPs.
+  - DNS over HTTPS traffic is now included in the WARP tunnel by default.
+  - Improved the error message displayed in the client GUI when the rate limit for entering an incorrect admin override code is met.
+  - Improved handling of non-SLAAC IPv6 interface addresses for better connectivity in IPv6 only environments.
+  - Fixed an issue where frequent network changes could cause WARP to become unresponsive.
+  - Improvement for WARP to check if tunnel connectivity fails or times out at device wake before attempting to reconnect.
+  - Fixed an issue causing WARP connection disruptions after network changes.
+
+  **Known issues**
+  - DNS resolution may be broken when the following conditions are all true:
+    - WARP is in Secure Web Gateway without DNS filtering (tunnel-only) mode.
+    - A custom DNS server address is configured on the primary network adapter.
+    - The custom DNS server address on the primary network adapter is changed while WARP is connected.
+
+    To work around this issue, reconnect the WARP client by toggling off and back on.
+  - We have received reports of performance issues from some customers that have upgraded to 24H2 with the Windows Filtering Platform and local device firewall rules. Before rolling out this Windows version, we highly encourage customers to test thoroughly as we continue to debug with Microsoft.
+  - Devices with `KB5055523` installed may receive a warning about `Win32/ClickFix.ABA` being present in the installer. We are working with Microsoft to correct this issue.
+version: 2025.4.929.0
+releaseDate: 2025-05-14T21:32:45.903Z
+packageURL: https://downloads.cloudflareclient.com/v1/download/windows/version/2025.4.929.0
+packageSize: 130322432
+platformName: Windows
