Skip to content

Cloudflare Docs

Docs Directory APIs SDKs

Select theme

Cloudflare Zero Trust

No results found. Try a different search term, or use our .

Overview
Get started
Implementation guides
Team and resources
- Application Library
- Devices
  - Overview
  - WARP
    
    Overview
    
    Download WARP
    
    Stable releases
    Beta releases
    Update WARP
    Migrate 1.1.1.1 app
    
    First-time setup
    
    Deploy WARP
    
    Overview
    
    Managed deployment
    
    Overview
    
    Partners
    
    Overview
    Fleet
    Hexnode
    Intune
    Jamf
    JumpCloud
    Kandji
    
    Parameters
    Connect WARP before Windows login
    Multiple users on a Windows device
    Switch between Zero Trust organizations
    Automated WARP registration
    
    Manual deployment
    Device enrollment permissions
    WARP with firewall
    WARP with legacy VPN
    
    Configure WARP
    
    Overview
    Device profiles
    
    WARP modes
    
    Overview
    Enable Device Information Only
    
    WARP settings
    
    Overview
    Captive portal detection
    
    Managed networks
    
    Route traffic
    
    Overview
    Local Domain Fallback
    Split Tunnels
    WARP architecture
    
    WARP sessions
    
    Troubleshoot WARP
    
    Overview
    WARP troubleshooting guide
    Common issues
    Client errors
    Diagnostic logs
    Known limitations
    Connectivity status
    
    Remove WARP
  - Agentless options
    
    Overview
    
    DNS
    
    Locations
    
    Add locations
    DNS resolver IPs and hostnames
    
    DNS over TLS (DoT)
    DNS over HTTPS (DoH)
    
    PAC files
  - User-side certificates
    
    Overview
    Install certificate using WARP
    Install certificate manually
    Deploy custom certificate
- Users
Networks
- Connectors
  - Cloudflare Tunnel
    
    Overview
    
    Get started
    
    Overview
    Create a tunnel (dashboard)
    Create a tunnel (API)
    Useful terms
    
    Downloads
    
    Overview
    Update cloudflared
    License
    Copyrights
    
    Configure a tunnel
    
    Configure cloudflared parameters
    
    Overview
    Tunnel run parameters
    Origin configuration parameters
    
    Tunnel with firewall
    
    Tunnel availability and failover
    
    Overview
    Deploy cloudflared replicas
    System requirements
    
    Tunnel permissions
    Cipher suites
    
    Use cases
    
    Overview
    
    SSH
    
    Overview
    SSH with Access for Infrastructure
    Self-managed SSH keys
    Browser-rendered SSH terminal
    SSH with client-side cloudflared (legacy)
    
    RDP
    
    Overview
    Browser-based RDP
    RDP with WARP client
    RDP with client-side cloudflared
    
    SMB
    gRPC
    
    Environments
    
    Overview
    Ansible
    AWS
    Azure
    GCP
    Kubernetes
    Terraform
    
    Private networks
    
    Overview
    
    Connect with cloudflared
    
    Overview
    Connect a private hostname Beta
    Connect an IP/CIDR
    Private DNS
    Virtual networks
    
    Peer-to-peer connectivity
    
    WARP Connector
    
    Overview Beta
    Site-to-Internet
    Site-to-site
    User-to-site
    Tips and best practices
    
    Published applications
    
    Overview
    DNS records
    Public load balancers
    Protocols
    
    Monitor tunnels
    
    Overview
    Log streams
    Notifications
    Metrics
    
    Troubleshoot tunnels
    
    Overview
    Diagnostic logs
    Private network connectivity
    Common errors
    
    Do more with Tunnel
    
    Overview
    
    Locally-managed tunnels
    
    Overview
    Create a locally-managed tunnel
    Configuration file
    
    Run as a service
    
    Overview
    Linux
    macOS
    Windows
    
    Useful commands
    Tunnel permissions
    Useful terms
    
    Quick Tunnels
Insights
- Analytics
- DEX
- Logs
  - Overview
  - User logs
  - Access audit logs
  - Gateway activity logs
    
    Overview
    Manage PII
  - SCIM logs
  - Tunnel audit logs
  - Posture logs
  - Logpush integration
  - Enable Email Security logs
- Risk score
Access controls
- Overview
- Applications
  - Add web applications
    
    Overview
    
    SaaS applications
    
    Overview
    Generic OIDC application
    Generic SAML application
    Adobe Acrobat Sign
    Area 1
    Asana
    Atlassian Cloud
    AWS
    Braintree
    Coupa
    Digicert
    DocuSign
    Dropbox
    GitHub Enterprise Cloud
    Google Cloud
    Google Workspace
    Grafana
    Grafana Cloud
    Greenhouse Recruiting
    Hubspot
    Ironclad
    Jamf Pro
    Miro
    PagerDuty
    Pingboard
    Salesforce (OIDC)
    Salesforce (SAML)
    ServiceNow (OIDC)
    ServiceNow (SAML)
    Slack
    Smartsheet
    SparkPost
    Tableau Cloud
    Workday
    Zendesk
    Zoom
    
    Self-hosted public application
    
    Authorization cookie
    
    Overview
    Validate JWTs
    Application token
    CORS
  - Non-HTTP applications
    
    Overview
    Add an infrastructure application
    Add a self-hosted private application
    Browser-rendered terminal
    
    Client-side cloudflared
    
    Overview
    Enable automatic cloudflared authentication
    Arbitrary TCP
    
    Private network applications (legacy)
    Short-lived certificates (legacy)
  - Add bookmarks
- Policies
- AI controls
- Service credentials
  - Service tokens
- Access settings
  - App Launcher
  - Session management
Traffic policies
- Overview
- Get started
- DNS policies
- Network policies
- HTTP policies
- Egress policies
- Resolver policies Beta
- Identity-based policies
- Global policies
- Applications and app types
- Domain categories
- Order of enforcement
- Proxy
- Block page
- Managed service providers (MSPs)
Cloud and SaaS findings
Email Security
- Overview
- Retro Scan
- Setup
  - Before you begin
  - Post-delivery deployment
    
    API deployment
    
    Overview
    Set up with Microsoft 365
    
    BCC/Journaling
    
    BCC setup
    
    Gmail BCC setup
    
    Overview
    Enable Gmail BCC integration
    Connect your domains
    Add BCC rules
    Enable auto-moves
    
    Microsoft Exchange BCC setup
    
    Journaling setup
    
    Microsoft 365 journaling setup
    Manually add domains
  - Pre-delivery deployment
    
    Prerequisites
    
    Microsoft 365 as MX Record
    
    Overview
    
    Use cases
    
    1 - Junk email and Email Security Admin Quarantine
    2 - Junk email and user managed quarantine
    3 - Junk email and administrative quarantine
    4 - User managed quarantine and administrative quarantine
    5 - Junk email folder and administrative quarantine
    
    Google Workspace as MX Record
    Cisco - Email Security as MX Record
    Cisco - Cisco as MX Record
    
    MX/Inline deployment
    Set up MX/Inline deployment
    Egress IPs
    Partner domain TLS
  - Manage domains
- Email monitoring
- Directories
  - Overview
  - Manage integrated directories
    
    Manage groups in your directory
    Manage users in your directory
  - Manage Email Security directories
- Detection settings
- Auto-move events
- Phish submissions
- Outbound Data Loss Prevention (DLP)
- PhishGuard
- Reference
- Email Security API ↗ API
Integrations
- Cloud and SaaS integrations
- Service providers
- Identity providers
Reusable components
- Lists
- Tags
- Custom pages
  - Access login page
  - Access custom block pages
- Posture checks
  - Overview
  - WARP client checks
    
    Overview
    Application check
    Carbon Black
    Client certificate
    Device serial numbers
    Device UUID
    Disk encryption
    Domain joined
    File check
    Firewall
    OS version
    Require Gateway
    Require WARP
    SentinelOne
  - Access integrations
    
    Overview
    Mutual TLS
    Tanium (legacy)
Data loss prevention
- Overview
- Scan HTTP traffic
- Scan SaaS apps ↗
- DLP profiles
- Detection entries
Reference architecture ↗
Tutorials
Remote browser isolation
- Overview
- Set up Browser Isolation
- Isolation policies
- Extensions
- Accessibility
- Browser Isolation with firewall
- Known limitations
Videos
Roles and permissions
Account limits
API and Terraform
Changelog
FAQ
Glossary

GitHub X.com YouTube

Select theme

On this page

Overview

On this page

Overview

Was this helpful?

Directory
Cloudflare Zero Trust
Access controls
Access settings

Access settings

App Launcher
Session management

Was this helpful?

Last updated: Oct 24, 2025

Resources
API
New to Cloudflare?
Directory
Sponsorships
Open Source

Support
Help Center
System Status
Compliance
GDPR

Company
cloudflare.com
Our team
Careers

Tools
Cloudflare Radar
Speed Test
Is BGP Safe Yet?
RPKI Toolkit
Certificate Transparency

Community
X
Discord
YouTube
GitHub

© 2025 Cloudflare, Inc.
Privacy Policy
Terms of Use
Report Security Issues
Trademark