Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 8 additions & 4 deletions src/components/DashButton.astro
Original file line number Diff line number Diff line change
Expand Up @@ -40,11 +40,15 @@ if (!route) {
*/

const name = buttonName ?? route.name;
const baseUrl = zeroTrust
? "https://one.dash.cloudflare.com"
: "https://dash.cloudflare.com";
const baseUrl = "https://dash.cloudflare.com";

let { href } = new URL(route.deeplink, baseUrl);
// Zero Trust routes use internal paths (e.g. /?to=/:account/email-security/...)
// that need the /one/ prefix when accessed via the Core dashboard.
const deeplink = zeroTrust
? route.deeplink.replace("/?to=/:account/", "/?to=/:account/one/")
: route.deeplink;

let { href } = new URL(deeplink, baseUrl);
---

<LinkButton href={href} icon="external" target="_blank"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ products:

SSH with [Cloudflare Access for Infrastructure](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access/) allows you to use short-lived SSH certificates to eliminate SSH key management and reduce security risks associated with lost or stolen keys.

Previously, users had to generate this certificate by using the [Cloudflare API](https://developers.cloudflare.com/api/) directly. With this update, you can now create and manage this certificate in the [Cloudflare One dashboard](https://one.dash.cloudflare.com) from the **Access controls** > **Service credentials** page.
Previously, users had to generate this certificate by using the [Cloudflare API](https://developers.cloudflare.com/api/) directly. With this update, you can now create and manage this certificate in the [Cloudflare dashboard](https://dash.cloudflare.com/?to=/:account/one/access-controls/settings) from the **Access controls** > **Service credentials** page.

![Navigate to Access controls and then Service credentials to see where you can generate an SSH CA](~/assets/images/changelog/access/SSH-CA-generation.png)

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,4 @@ products:

Cloudflare [admin activity logs](/cloudflare-one/insights/logs/) now capture each time a [DNS over HTTP (DoH) user](/cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-https/) is created.

These logs can be viewed from the [Cloudflare One dashboard](https://one.dash.cloudflare.com/), pulled via the [Cloudflare API](/api/), and exported through [Logpush](/cloudflare-one/insights/logs/logpush/).
These logs can be viewed from the [Cloudflare dashboard](https://dash.cloudflare.com/), pulled via the [Cloudflare API](/api/), and exported through [Logpush](/cloudflare-one/insights/logs/logpush/).
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ description: A new home page experience for deploying and managing browser isola
date: 2025-05-01
---

import { DashButton } from "~/components";

A new **Browser Isolation Overview** page is now available in the Cloudflare Zero Trust dashboard. This centralized view simplifies the management of [Remote Browser Isolation (RBI)](/cloudflare-one/remote-browser-isolation/) deployments, providing:

- **Streamlined Onboarding:** Easily set up and manage isolation policies from one location.
Expand All @@ -15,4 +17,6 @@ This update consolidates previously disparate settings, accelerating deployment,

![Browser Isolation Overview](~/assets/images/changelog/browser-isolation/browser-isolation-overview.png)

To access the new overview, log in to your Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/) and find Browser Isolation in the side navigation bar.
To access the new overview, log in to your [Cloudflare dashboard](https://dash.cloudflare.com/) and go to **Zero Trust** > **Browser Isolation**.

<DashButton url="/?to=/:account/browser-isolation/overview" zeroTrust />
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ date: 2025-04-30

import { Tabs, TabItem } from "~/components";

The [Cloudflare Zero Trust dashboard](https://one.dash.cloudflare.com/) now supports Cloudflare's native dark mode for all accounts and plan types.
The [Cloudflare dashboard](https://dash.cloudflare.com/) now supports Cloudflare's native dark mode for all accounts and plan types.

Zero Trust Dashboard will automatically accept your user-level preferences for system settings, so if your Dashboard appearance is set to 'system' or 'dark', the Zero Trust dashboard will enter dark mode whenever the rest of your Cloudflare account does.

Expand All @@ -16,7 +16,7 @@ Zero Trust Dashboard will automatically accept your user-level preferences for s

To update your view preference in the Zero Trust dashboard:

1. Log into the [Zero Trust dashboard](https://one.dash.cloudflare.com/).
1. Log into the [Cloudflare dashboard](https://dash.cloudflare.com/).
2. Select your user icon.
3. Select **Dark Mode**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -21,4 +21,4 @@ There are eight brand new onboarding guides in total:

Each flow walks the user through the steps to configure the essential elements, and provides a “more details” panel with additional contextual information about what the user will accomplish at the end, along with why the steps they take are important.

Try them out now in the [Zero Trust dashboard](https://one.dash.cloudflare.com/?to=/:account/home)!
Try them out now in the [Zero Trust dashboard](https://dash.cloudflare.com/?to=/:account/one/home)!
Original file line number Diff line number Diff line change
Expand Up @@ -14,4 +14,4 @@ You can review these metrics against application type, such as Artificial Intell

These application statuses can also be used in Gateway HTTP policies, so you can block, isolate, limit uploads and downloads, and more based on the application status.

Both the analytics and policies are accessible in the Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/), empowering organizations with better visibility and control.
Both the analytics and policies are accessible in the [Cloudflare dashboard](https://dash.cloudflare.com/), empowering organizations with better visibility and control.
Original file line number Diff line number Diff line change
Expand Up @@ -14,4 +14,4 @@ With this update, you can review data transfer metrics at the domain level, rath

These metrics can be filtered by all available filters on the dashboard, including user, application, or content category.

Both the analytics and policies are accessible in the Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/), empowering organizations with better visibility and control.
Both the analytics and policies are accessible in the [Cloudflare dashboard](https://dash.cloudflare.com/), empowering organizations with better visibility and control.
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,8 @@ products:
- access
---

import { DashButton } from "~/components";

A new Access Analytics dashboard is now available to all Cloudflare One customers. Customers can apply and combine multiple filters to dive into specific slices of their Access metrics. These filters include:

- Logins granted and denied
Expand All @@ -19,4 +21,6 @@ A new Access Analytics dashboard is now available to all Cloudflare One customer

![Access Analytics](~/assets/images/changelog/cloudflare-one/accessanalytics.png)

To access the new overview, log in to your Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/) and find Analytics in the side navigation bar.
To access the new overview, log in to your [Cloudflare dashboard](https://dash.cloudflare.com/) and go to **Zero Trust** > **Insights** > **Analytics**.

<DashButton url="/?to=/:account/insights/dashboards" zeroTrust />
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ products:
- casb
---

import { DashButton } from "~/components";

Zero Trust now includes **Data security analytics**, providing you with unprecedented visibility into your organization sensitive data.

The new dashboard includes:
Expand All @@ -23,4 +25,6 @@ The new dashboard includes:

![Data Security Analytics](~/assets/images/changelog/cloudflare-one/cf1-data-security-analytics-v1.png)

To access the new dashboard, log in to [Cloudflare One](https://one.dash.cloudflare.com/) and go to **Insights** on the sidebar.
To access the new dashboard, log in to [Cloudflare dashboard](https://dash.cloudflare.com/) and go to **Zero Trust** > **Insights** on the sidebar.

<DashButton url="/?to=/:account/insights/overview" zeroTrust />
Original file line number Diff line number Diff line change
Expand Up @@ -14,4 +14,4 @@ Additionally, a new exportable access report is available, allowing customers to

![Cloudflare One Analytics Dashboards](~/assets/images/changelog/cloudflare-one/access-report.png)

Both features are accessible in the Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/), empowering organizations with better visibility and control.
Both features are accessible in the [Cloudflare dashboard](https://dash.cloudflare.com/), empowering organizations with better visibility and control.
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,4 @@ You can now visualize and explore:

![Gateway Analytics](~/assets/images/changelog/cloudflare-one/gateway-analytics.png)

To access the new overview, log in to your Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/) and go to Analytics in the side navigation bar.
To access the new overview, log in to your [Cloudflare dashboard](https://dash.cloudflare.com/) and go to Analytics in the side navigation bar.
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,14 @@ date: 2025-05-18
product: Gateway
---

import { DashButton } from "~/components";

42 new applications have been added for Zero Trust support within the Application Library and Gateway policy enforcement, giving you the ability to investigate or apply inline policies to these applications.

33 of the 42 applications are Artificial Intelligence applications. The others are Human Resources (2 applications), Development (2 applications), Productivity (2 applications), Sales & Marketing, Public Cloud, and Security.

To view all available applications, log in to your Cloudflare [Zero Trust dashboard](https://one.dash.cloudflare.com/), navigate to the **App Library** under **My Team**.
To view all available applications, log in to your [Cloudflare dashboard](https://dash.cloudflare.com/) and go to **Zero Trust** > **Team resources** > **App Library**.

<DashButton url="/?to=/:account/team-resources/application-library" zeroTrust />

For more information on creating Gateway policies, see our [Gateway policy documentation](/cloudflare-one/traffic-policies/).
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Email security relies on your submissions to continuously improve our detection

To ensure all customer feedback is actionable, we have launched two new features to manage invalid submissions sent to our team and user [submission aliases](/cloudflare-one/email-security/settings/phish-submissions/submission-addresses/):

- **Email Notifications:** We now automatically notify users by email when they provide an invalid submission, educating them on the correct format. To disable notifications, go to **[Settings](https://one.dash.cloudflare.com/?to=/:account/email-security/settings)** > **Invalid submission emails** and turn the feature off.
- **Email Notifications:** We now automatically notify users by email when they provide an invalid submission, educating them on the correct format. To disable notifications, go to **[Settings](https://dash.cloudflare.com/?to=/:account/one/email-security/settings)** > **Invalid submission emails** and turn the feature off.

![EmailSec-Invalid-Submissions-Toggle](~/assets/images/changelog/email-security/EmailSec-Invalid-Submissions-Toggle.png)

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,8 @@ products:
date: 2026-03-04
---

import { DashButton } from "~/components";

The [Gateway Authorization Proxy](/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/#authorization-endpoint) and [PAC file hosting](/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/#create-a-hosted-pac-file) are now in open beta for all plan types.

Previously, [proxy endpoints](/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/#source-ip-endpoint) relied on static source IP addresses to authorize traffic, providing no user-level identity in logs or policies. The new authorization proxy replaces IP-based authorization with [Cloudflare Access](/cloudflare-one/access-controls/policies/) authentication, verifying who a user is before applying Gateway filtering without installing the WARP client.
Expand All @@ -21,7 +23,10 @@ This is ideal for environments where you cannot deploy a device client, such as

### Get started

1. In [Cloudflare One](https://one.dash.cloudflare.com/), go to **Networks** > **Resolvers & Proxies** > **Proxy endpoints**.
1. In [Cloudflare dashboard](https://dash.cloudflare.com/), go to **Zero Trust** > **Networks** > **Resolvers & Proxies** > **Proxy endpoints**.

<DashButton url="/?to=/:account/networks/resolvers-proxies" zeroTrust />

2. [Create an authorization proxy endpoint](/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/#authorization-endpoint) and configure Access policies.
3. [Create a hosted PAC file](/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/#create-a-hosted-pac-file) or write your own.
4. [Configure browsers](/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/#3b-configure-browser-to-use-pac-file) to use the PAC file URL.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ This new experience provides everything you need to manage Tunnels for [public a
- Securing origin servers and [public applications](/cloudflare-one/networks/connectors/cloudflare-tunnel/routing-to-tunnel/) with CDN, WAF, Load Balancing, and DDoS protection
- Connecting [Workers to private services](/workers-vpc/) via Workers VPC

**Cloudflare One Dashboard**: Navigate to [Zero Trust > Networks > Connectors](https://one.dash.cloudflare.com/?to=/:account/networks/connectors) to manage Tunnels for:
**Cloudflare One Dashboard**: Navigate to [Zero Trust > Networks > Connectors](https://dash.cloudflare.com/?to=/:account/one/networks/connectors) to manage Tunnels for:

- Securing your public applications with [Zero Trust access policies](/cloudflare-one/access-controls/applications/http-apps/self-hosted-public-app/)
- Connecting users to [private applications](/cloudflare-one/access-controls/applications/non-http/self-hosted-private-app/)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,6 @@ In the Cloudflare One dashboard, the overview page for a specific Cloudflare Tun
Previously, you could only stream logs from one replica at a time. With this update:

- **Replicas on the tunnel overview** — All active replicas for the selected tunnel now appear on that tunnel's overview page under **Connectors**. Select any replica to stream its logs.
- **Multi-connector log streaming** — Stream logs from multiple replicas simultaneously, making it easier to correlate events across your infrastructure during debugging or incident response. To try it out, log in to [Cloudflare One](https://one.dash.cloudflare.com/) and go to **Networks** > **Connectors** > **Cloudflare Tunnels**. Select **View logs** next to the tunnel you want to monitor.
- **Multi-connector log streaming** — Stream logs from multiple replicas simultaneously, making it easier to correlate events across your infrastructure during debugging or incident response. To try it out, log in to [Cloudflare dashboard](https://dash.cloudflare.com/) and go to **Networks** > **Connectors** > **Cloudflare Tunnels**. Select **View logs** next to the tunnel you want to monitor.

For more information, refer to [Tunnel log streams](/cloudflare-one/networks/connectors/cloudflare-tunnel/monitor-tunnels/logs/) and [Deploy replicas](/cloudflare-one/networks/connectors/cloudflare-tunnel/configure-tunnels/tunnel-availability/deploy-replicas/).
2 changes: 1 addition & 1 deletion src/content/docs/billing/understand/preview-services.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ To turn on a preview service, use the **Dashboard link** in the following table.
| Waiting Room | [Waiting Room dashboard](https://dash.cloudflare.com/?to=/:account/:zone/traffic/waiting-rooms) | [Waiting Room docs](/waiting-room/) | [Waiting Room community](https://community.cloudflare.com/) |
| Web3 | [Web3 dashboard](https://dash.cloudflare.com/?to=/:account/:zone/web3) | [Web3 docs](/web3/) | [Web3 discord](https://discord.cloudflare.com) |
| Workers | [Workers dashboard](https://dash.cloudflare.com/?to=/:account/workers) | [Workers docs](/workers/) | [Workers discord](https://discord.com/invite/cloudflaredev) |
| Zero Trust | [Zero Trust dashboard](https://one.dash.cloudflare.com/) | [Zero Trust docs](/cloudflare-one/) | [Zero Trust community](https://community.cloudflare.com/c/security/access/51) |
| Zero Trust | [Cloudflare dashboard](https://dash.cloudflare.com/) | [Zero Trust docs](/cloudflare-one/) | [Zero Trust community](https://community.cloudflare.com/c/security/access/51) |

## Recommendations

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,16 @@ sidebar:
order: 5
---

import { DashButton } from "~/components";

By default, you can create a maximum of 200 policies. We recommend you create lists of IP addresses to reference within policies to streamline policy management.

## Add a policy

1. In the [Cloudflare One](https://one.dash.cloudflare.com) dashboard, go to **Firewall policies** > **Custom policies**.
1. In the [Cloudflare dashboard](https://dash.cloudflare.com/), go to **Zero Trust** > **Firewall policies** > **Custom policies**.

<DashButton url="/?to=/:account/traffic-policies/overview" zeroTrust />

2. Select **Add a policy**.
3. Fill out the information for your new policy. All existing policies apply to IPv4. You can use a managed [IP list](https://www.cloudflare.com/en-gb/ips/) when populating the **Value**.
4. When you are done, select **Add new policy**.
Expand All @@ -29,7 +34,10 @@ To disable an existing policy, from the **Custom policies** tab, set the **Enabl

## Update a policy

1. In the [Cloudflare One](https://one.dash.cloudflare.com) dashboard, go to **Firewall policies** > **Custom policies**.
1. In the [Cloudflare dashboard](https://dash.cloudflare.com/), go to **Zero Trust** > **Firewall policies** > **Custom policies**.

<DashButton url="/?to=/:account/traffic-policies/overview" zeroTrust />

2. Locate the policy you want to edit and select the three dots > **Edit**.
3. Update the policy with your changes and select **Save**.

Expand Down
7 changes: 6 additions & 1 deletion src/content/docs/cloudflare-one/api-terraform.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ tags:
- REST API
---

import { DashButton } from "~/components";

You can manage your Cloudflare Zero Trust configuration using the API or Terraform. For more information, refer to the following links:

- [API reference](/api/)
Expand All @@ -25,7 +27,10 @@ Super Administrators can lock all settings as read-only in the Cloudflare One da

To enable read-only mode:

1. In [Cloudflare One](https://one.dash.cloudflare.com/), go to **Settings** > **Admin controls**.
1. In [Cloudflare dashboard](https://dash.cloudflare.com/), go to **Zero Trust** > **Settings** > **Admin controls**.

<DashButton url="/?to=/:account/settings" zeroTrust />

2. Enable **Set dashboard to read-only**.

All users, regardless of [user permissions](/cloudflare-one/roles-permissions/), will be prevented from making configuration changes through the UI.
Expand Down
Loading
Loading