diff --git a/src/content/docs/waf/tools/security-level.mdx b/src/content/docs/waf/tools/security-level.mdx index 84d14bf7c3263f..b2a0eb8c802a3a 100644 --- a/src/content/docs/waf/tools/security-level.mdx +++ b/src/content/docs/waf/tools/security-level.mdx @@ -6,12 +6,10 @@ title: Security Level import { Render } from "~/components"; - - ---- + - + --- \ No newline at end of file diff --git a/src/content/fields/index.yaml b/src/content/fields/index.yaml index 12eab1c468b1c4..793673d750c47f 100644 --- a/src/content/fields/index.yaml +++ b/src/content/fields/index.yaml @@ -602,9 +602,9 @@ entries: data_type: Number categories: [Request] keywords: [request, cloudflare, score, client, visitor] - summary: Represents a Cloudflare threat score from 0–100, where 0 indicates low risk. + summary: Represents a Cloudflare threat score. description: |- - Values above 10 may represent spammers or bots, and values above 40 identify bad actors on the Internet. It is rare to see values above 60. A common recommendation is to challenge requests with a score above 10 and to block those above 50. + Previously, a threat score represented a Cloudflare threat score from 0–100, where 0 indicated low risk. Now, the threat score is always `0` (zero). - name: cf.tls_cipher data_type: String diff --git a/src/content/partials/waf/security-level-scores.mdx b/src/content/partials/waf/security-level-scores.mdx index e57080b0a1fab0..42e0533c6b7671 100644 --- a/src/content/partials/waf/security-level-scores.mdx +++ b/src/content/partials/waf/security-level-scores.mdx @@ -2,9 +2,9 @@ {} --- -## Security level +In the Cloudflare dashboard, security level has the value _Always protected_ and you cannot change this setting. To turn Under Attack mode on or off, use the separate toggle. -Cloudflare provides _I'm Under Attack!_ as a security level. +In the API and in Terraform, use security level to turn Under Attack mode on or off. Cloudflare's Under Attack mode performs additional security checks to help mitigate layer 7 DDoS attacks. diff --git a/src/content/partials/waf/threat-score-definition.mdx b/src/content/partials/waf/threat-score-definition.mdx index d0a07325129ddc..87063f7dd3b90f 100644 --- a/src/content/partials/waf/threat-score-definition.mdx +++ b/src/content/partials/waf/threat-score-definition.mdx @@ -4,9 +4,7 @@ ## Threat score -The threat score measures IP reputation across Cloudflare services. This score is calculated based on [Project Honeypot](https://www.projecthoneypot.org/), external public IP information, as well as internal threat intelligence from our [WAF managed rules](/waf/reference/legacy/old-waf-managed-rules/) and [DDoS](/ddos-protection/about/). - -The threat score of a request has a value from 0 to 100, where 0 indicates low risk. Values above 10 may represent spammers or bots, and values above 40 identify bad actors on the Internet. +Previously, a threat score represented a Cloudflare threat score from 0–100, where 0 indicates low risk. Now, the threat score is always `0` (zero). :::note[Recommendation] Currently we do not recommend creating rules based on the threat score, since this score is no longer being populated.