Skip to content

[Network Firewall] ELI5 Overview page #29156

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Maddy-Cloudflare merged 2 commits into from
Mar 20, 2026
Merged

[Network Firewall] ELI5 Overview page #29156

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e6063e8
[Network Firewall] ELI5 Overview page
Maddy-Cloudflare Mar 20, 2026
3f39de9
Remove edge
Maddy-Cloudflare Mar 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 7 additions & 4 deletions src/content/docs/cloudflare-network-firewall/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,15 +17,15 @@ import {
} from "~/components";

<Description>
Protect your cloud infrastructure or network offices with advanced, scalable
firewall-as-a-service protection.
Filter and block unwanted traffic at Cloudflare's global network edge,
before it reaches your infrastructure.
</Description>

<Plan type="enterprise" />

Cloudflare Network Firewall (formerly Magic Firewall) is a <GlossaryTooltip term="firewall-as-a-service">firewall-as-a-service (FWaaS)</GlossaryTooltip> delivered from the Cloudflare global network to protect office networks and cloud infrastructure with advanced, scalable protection. With Cloudflare Network Firewall, you can apply filter rules on a variety of criteria, such as protocol and <GlossaryTooltip term="data packet">packet</GlossaryTooltip> length, to filter unwanted traffic before it reaches your network.

Cloudflare Network Firewall uses Wireshark syntax, a domain-specific language (DSL) common in the networking world and the same syntax used across our other products. With this syntax, you can easily craft powerful rules to precisely allow or deny any traffic in or out of your network.
Rules are written using the [Cloudflare Rules language](/ruleset-engine/rules-language/), which is inspired by Wireshark syntax, a widely used packet analysis filter language and the same syntax used across our other products. With this syntax, you can craft powerful rules to precisely allow or deny any traffic in or out of your network.

Cloudflare Network Firewall is available with the purchase of [Magic Transit](/magic-transit/) or [Cloudflare WAN](/cloudflare-wan/).

Expand All @@ -37,7 +37,10 @@ Cloudflare Network Firewall is available with the purchase of [Magic Transit](/m
header="Intrusion Detection System (IDS)"
href="/cloudflare-network-firewall/how-to/enable-ids/"
>
Actively monitor for a wide range of known threat signatures in your traffic.
Actively monitor for a wide range of known threat signatures in your traffic,
expanding your security coverage beyond packet-filtering rules to detect
sophisticated attacks such as ransomware, data exfiltration, and network
scanning.
</Feature>

---
Expand Down
Loading