Configurations
Get Zero Trust account configuration
Update Zero Trust account configuration
Patch Zero Trust account configuration
ModelsExpand Collapse
class BlockPageSettings: …Specify block page layout settings.
Specify block page layout settings.
Specify the block page background color in #rrggbb format when the mode is customized_block_page.
Specify the block page footer text when the mode is customized_block_page.
Specify the block page header text when the mode is customized_block_page.
Specify whether to append context to target_uri as query parameters. This applies only when the mode is redirect_uri.
Specify the full URL to the logo file when the mode is customized_block_page.
Specify the admin email for users to contact when the mode is customized_block_page.
Specify the subject line for emails created from the block page when the mode is customized_block_page.
mode: Optional[Literal["", "customized_block_page", "redirect_uri"]]Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI.
Specify whether to redirect users to a Cloudflare-hosted block page or a customer-provided URI.
Indicate that this setting was shared via the Orgs API and read only for the current account.
Specify whether to suppress detailed information at the bottom of the block page when the mode is customized_block_page.
class ExtendedEmailMatching: …Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses . or + modifiers.
Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses . or + modifiers.
class GatewayConfigurationSettings: …Specify account settings.
Specify account settings.
certificate: Optional[Certificate]Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
Specify certificate settings for Gateway TLS interception. If unset, the Cloudflare Root CA handles interception.
Specify custom certificate settings for BYO-PKI. This field is deprecated; use certificate instead.
Configures user email settings for firewall policies. When you enable this, the system standardizes email addresses in the identity portion of the rule to match extended email variants in firewall policies. When you disable this setting, the system matches email addresses exactly as you provide them. Enable this setting if your email uses . or + modifiers.
inspection: Optional[Inspection]Define the proxy inspection mode.
Define the proxy inspection mode.
mode: Optional[Literal["static", "dynamic"]]Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic.
Define the proxy inspection mode. 1. static: Gateway applies static inspection to HTTP on TCP(80). With TLS decryption on, Gateway inspects HTTPS traffic on TCP(443) and UDP(443). 2. dynamic: Gateway applies protocol detection to inspect HTTP and HTTPS traffic on any port. TLS decryption must remain on to inspect HTTPS traffic.
Specify whether to detect protocols from the initial bytes of client traffic.