Create your first network policy

You can control network-level traffic by filtering requests by selectors such as IP addresses and ports. You can also integrate network policies with an identity provider to apply identity-based filtering.

To create a new network policy:

1. In Zero Trust ↗, go to Gateway > Firewall policies.
2. In the Network tab, select Add a policy.
3. Name the policy.
4. Under Traffic, build a logical expression that defines the traffic you want to allow or block.
5. Choose an Action to take when traffic matches the logical expression.

   In the following example, you can use a list of device serial numbers to ensure users can only access an application if they connect with the WARP client from a company device:

   Selector	Operator	Value	Logic	Action
   Passed Device Posture Checks	not in	Device serial numbers	And	Block
   SNI Domain	is	internalapp.com

6. Select Create policy.

For more information, refer to network policies.

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!