[CF1] gateway posture checks note #20995
Conversation
deadlypants1973
requested review from
a team,
kennyj42 and
ranbel
as code owners
|
Howdy and thanks for contributing to our repo. The Cloudflare team reviews new, external PRs within two (2) weeks. If it's been two weeks or longer without any movement, please tag the PR Assignees in a comment. We review internal PRs within 1 week. If it's something urgent or has been sitting without a comment, start a thread in the Developer Docs space internally. PR Change SummaryAdded a cautionary note regarding the behavior of Gateway posture checks during active sessions.
Modified Files
How can I customize these reviews?Check out the Hyperlint AI Reviewer docs for more information on how to customize the review. If you just want to ignore it on this PR, you can add the Note specifically for link checks, we only check the first 30 links in a file and we cache the results for several hours (for instance, if you just added a page, you might experience this). Our recommendation is to add What is Hyperlint?Hyperlint is an AI agent that helps you write, edit, and maintain your documentation. Learn more about the Hyperlint AI reviewer and the checks that we can run on your documentation. |
|
Preview URL: https://fa76b054.preview.developers.cloudflare.com Files with changes (up to 15)
|
|
|
||
| :::caution | ||
|
|
||
| Gateway does not terminate an active session, even if a subsequent posture check fails during that session. Gateway only evaluates posture checks at the beginnning of a session, and ongoing sessions will remain uninterrupted. |
There was a problem hiding this comment.
What counts as an "active Gateway session"?
There was a problem hiding this comment.
We currently have WARP session durations https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/
and Access session durations https://developers.cloudflare.com/cloudflare-one/identity/users/session-management/
There was a problem hiding this comment.
It's the same "Active connections are not terminated" note that is included here: https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/#limitations
That same product behavior applies to policies subject to a posture rule whose result changes mid "Active Connection".
Co-authored-by: marciocloudflare <[email protected]>
* [CF1] gateway posture checks note * Update src/content/docs/cloudflare-one/identity/devices/index.mdx * Update src/content/docs/cloudflare-one/identity/devices/index.mdx Co-authored-by: marciocloudflare <[email protected]> --------- Co-authored-by: marciocloudflare <[email protected]>
5 participants
Summary
PCX-9128
Screenshots (optional)
Documentation checklist