Skip to content

Commit f116fab

Browse files
authored
Update order-of-precedence.mdx
1 parent c515b19 commit f116fab

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/content/partials/cloudflare-one/gateway/order-of-precedence.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,6 @@ Order of precedence refers to the priority of individual policies within the {pr
99

1010
In Gateway, the order of precedence follows the first match principle — once a site matches an Allow or Block policy, evaluation stops and no subsequent policies can override the decision. Therefore, Cloudflare recommends putting the most specific policies and exceptions at the top of the list and the most general policies at the bottom.
1111

12-
If Gateway traffic is headed to a private IP address protected as an Access application, that traffic will still be evaluated by the destination application's Access policies, even if a Gateway Allow rule matched first.
12+
If Gateway traffic is headed to a private IP address protected as an Access application, that traffic will still be evaluated by the destination application's Access policies, even if a Gateway Allow rule matched first. Block policies that match traffic will terminate any other policy evaluation.
1313

1414
This is expected behavior. A Gateway Allow policy does not override or bypass Access policies.

0 commit comments

Comments
 (0)