Update the default device settings profile
Updates the default device settings profile for an account.
Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
Accepted Permissions (at least one required)
Body ParametersJSON
Whether to receive update notifications when a new version of the client is available.
If the dns_server field of a fallback domain is not present, the client will fall back to a best guess of the default/system DNS resolvers unless this policy option is set to true.
The amount of time in minutes a user is allowed access to their LAN. A value of 0 will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep. Note that this field is omitted from the response if null or unset.
The size of the subnet for the local access network. Note that this field is omitted from the response if null or unset.
Determines if the operating system will register WARP’s local interface IP with your on-premises DNS server.
Determines whether the WARP client indicates to SCCM that it is inside a VPN boundary. (Windows only).
Update the default device settings profile
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/devices/policy \
-X PATCH \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{
"allow_mode_switch": true,
"allow_updates": true,
"allowed_to_leave": true,
"captive_portal": 180,
"disable_auto_fallback": true,
"exclude_office_ips": true,
"lan_allow_minutes": 30,
"lan_allow_subnet_size": 24,
"register_interface_ip_with_dns": true,
"support_url": "https://1.1.1.1/help",
"switch_locked": true,
"tunnel_protocol": "wireguard"
}'{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"result": {
"allow_mode_switch": true,
"allow_updates": true,
"allowed_to_leave": true,
"auto_connect": 0,
"captive_portal": 180,
"default": true,
"disable_auto_fallback": true,
"dns_search_suffixes": [
{
"suffix": "internal.corp",
"description": "Example internal domains"
}
],
"enabled": true,
"exclude": [
{
"address": "192.0.2.0/24",
"description": "Exclude testing domains from the tunnel"
}
],
"exclude_office_ips": true,
"fallback_domains": [
{
"suffix": "example.com",
"description": "Domain bypass for local development",
"dns_server": [
"1.1.1.1"
]
}
],
"gateway_unique_id": "699d98642c564d2e855e9661899b7252",
"global_acceleration": {
"api_endpoints": [
"198.51.100.1:443"
],
"enabled": true,
"masque_endpoints": [
"198.51.100.1:443"
],
"wireguard_endpoints": [
"198.51.100.1:2408"
]
},
"include": [
{
"address": "192.0.2.0/24",
"description": "Include testing domains in the tunnel"
}
],
"policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
"register_interface_ip_with_dns": true,
"sccm_vpn_boundary_support": false,
"service_mode_v2": {
"mode": "proxy",
"port": 3000
},
"support_url": "https://1.1.1.1/help",
"switch_locked": true,
"tunnel_protocol": "wireguard",
"virtual_networks": {
"allowed": [
"f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
],
"default": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
},
"success": true
}Returns Examples
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"result": {
"allow_mode_switch": true,
"allow_updates": true,
"allowed_to_leave": true,
"auto_connect": 0,
"captive_portal": 180,
"default": true,
"disable_auto_fallback": true,
"dns_search_suffixes": [
{
"suffix": "internal.corp",
"description": "Example internal domains"
}
],
"enabled": true,
"exclude": [
{
"address": "192.0.2.0/24",
"description": "Exclude testing domains from the tunnel"
}
],
"exclude_office_ips": true,
"fallback_domains": [
{
"suffix": "example.com",
"description": "Domain bypass for local development",
"dns_server": [
"1.1.1.1"
]
}
],
"gateway_unique_id": "699d98642c564d2e855e9661899b7252",
"global_acceleration": {
"api_endpoints": [
"198.51.100.1:443"
],
"enabled": true,
"masque_endpoints": [
"198.51.100.1:443"
],
"wireguard_endpoints": [
"198.51.100.1:2408"
]
},
"include": [
{
"address": "192.0.2.0/24",
"description": "Include testing domains in the tunnel"
}
],
"policy_id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
"register_interface_ip_with_dns": true,
"sccm_vpn_boundary_support": false,
"service_mode_v2": {
"mode": "proxy",
"port": 3000
},
"support_url": "https://1.1.1.1/help",
"switch_locked": true,
"tunnel_protocol": "wireguard",
"virtual_networks": {
"allowed": [
"f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
],
"default": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
},
"success": true
}