Skip to content
Firewall
Visit Firewall on GitHub
Set theme to dark (⇧+D)

Update Firewall Rules for customers or partners

You may want to adjust your Firewall Rules to increase access by customers or partners.

Potential examples include:

  • Removing rate limiting for an API
  • Sharing brand assets and marketing materials

Update Firewall Rules by ASN

If a customer or partner is large enough, you could set up a Firewall Rule based on an autonomous system number (ASN).

Allow traffic by ASN

This example uses:

ExpressionAction
(ip.geoip.asnum eq 12345 and cf.bot_management.score gt 30)Allow

Adjust rules by ASN

This example uses:

If a request meets these criteria, your firewall bypasses normal User Agent Block rules.

ExpressionAction
(ip.geoip.asnum eq 12345 and cf.threat_score lt 14)Bypass - User Agent Block

Update Firewall Rules by IP

For smaller organizations, you could set up Firewall Rules based on IP addresses.

Allow traffic by IP address

This example:

ExpressionAction
(ip.src eq 1.1.1.1 and http.host eq "example.com" and cf.bot_management.score gt 30)Allow

Adjust rules by IP address

This example specifies the network and host.

If a request meets these criteria, your firewall bypasses normal Rate Limiting rules.

ExpressionAction
(ip.src eq 1.1.1.1 and http.host eq "example.com")Bypass - Rate Limiting