Skip to content
Cloudflare for Teams
Visit Cloudflare for Teams on GitHub
Set theme to dark (⇧+D)

WARP settings

To manage WARP settings and device connectivity preferences, navigate to Settings > Devices on the Teams Dashboard.

Admin override

Feature availability
Operating SystemsWARP mode requiredTeams plans
macOS, Windows, LinuxAny modeAll plans

When this toggle is enabled, you can provide end users with an one-time password that will allow them to toggle off the WARP client in case they need to work around a temporary network issue (for example, an incompatible public Wi-Fi, or a firewall at a customer site blocking the connection).

When the toggle is disabled, one-time passwords will not be generated, and end users will not be able to toggle the client off when *Switch Locked is true.

You can also set a timeout to define how long the WARP client is allowed to be paused once the end user disables it. Once the time is up, the WARP client will automatically reconnect.

When you want to allow a user to disable the WARP client:

  1. Log in to the Teams Dashboard and ensure the Admin override toggle is enabled.
  2. Retrieve the 7-digit override code for their device by navigating to My Team > Devices > Connected devices, clicking on View for the desired device, and scrolling down to User details.
  3. Copy the code and share it with the end user for them to enter on their device.

Users will then need to open the WARP client on their devices, navigate to Preferences > Advanced > Enter code, and enter the override code in the pop-up window. The WARP client will now show as Disconnected and will mention the time when it will automatically reconnect.

Device enrollment permissions

Feature availability
Operating SystemsWARP mode requiredTeams plans
All systemsAny modeAll plans

Cloudflare for Teams allows you to establish which users in your organization can enroll new devices or revoke access to connected devices. To do that, you can create a device enrollment rule on the Teams Dashboard:

  1. Navigate to Settings > Devices.
  2. In the Device enrollment permissions card, click Manage.
  3. In the rule builder, configure one or more rules to define who can enroll or revoke devices.
  4. Set a session duration. Once the session expires, users will be asked to log in when attempting to connect a device.
  5. Click Save.

Captive portal detection

Feature availability
Operating SystemsWARP mode requiredTeams plans
macOS, WindowsWARP with GatewayAll plans

Captive Portal detection is the ability for the WARP client to detect a third-party onboarding flow before Internet access is obtained. This is most frequent in places such as airports, cafes, and hotels.

When the toggle is enabled, the WARP client will automatically turn off when it detects a captive portal, and it will automatically turn on after the amount of time you specify in the card.

Mode switch

Feature availability
Operating SystemsWARP mode requiredTeams plans
macOS, Windows, LinuxWARP with GatewayAll plans

When the toggle is enabled, users have the option to turn off the Gateway with WARP mode and switch to Gateway with DoH mode. When the toggle is disabled, end users will not be able to switch between WARP modes.


Enable Proxy

Feature availability
Operating SystemsTeams plans
macOS, Windows, LinuxAll plans
  1. Navigate to Settings > Network.
  2. Scroll down to L7 Firewall.
  3. Set the Proxy switch to Enabled.

Integrated experiences

Cloudflare for Teams allows you to perform one-click actions to accelerate Office 365 traffic. Navigate to Settings > Network on the Teams dash and either: