Skip to content

Commit ed4d0ea

Browse files
committed
Add body to HTTP
1 parent 1ac1a59 commit ed4d0ea

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/partials/cloudflare-one/gateway/order-of-enforcement.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -113,11 +113,11 @@ Gateway applies HTTP policies based on a combination of [action type](/cloudflar
113113
1. All Do Not Inspect policies are evaluated first, in order of precedence.
114114
2. If no policies match, all Isolate policies are evaluated in order of precedence.
115115
3. All Allow, Block and Do Not Scan policies are evaluated in order of precedence.
116+
4. The body of the HTTP request, including Data Loss Prevention (DLP), AV scanning, and file sandboxing, is evaluated.
116117

117118
This order of enforcement allows Gateway to first determine whether decryption should occur. If a site matches a Do Not Inspect policy, it is automatically allowed through Gateway and bypasses all other HTTP policies.
118119

119120
:::note
120-
121121
The only exception is if you are using [Clientless Web Isolation](/cloudflare-one/policies/browser-isolation/setup/clientless-browser-isolation/) — all sites within the clientless remote browser are implicitly isolated even if they match a Do Not Inspect policy.
122122
:::
123123

0 commit comments

Comments
 (0)