Skip to content

Cloudflare Docs

Cloudflare Docs

Magic Transit home
Blog: Magic WAN & Magic Firewall
Cloudflare homepage

Overview
Plans
About
Analytics
IDS
List types
Protocol validation rules
Ruleset logic
Traffic types
How to
Add rules
Form expressions
Use IP lists
Enable IDS
Enable Magic user roles
Enable Managed Rulesets
Filter different views
Use Logpush with IDS
Packet captures
PCAPs bucket setup
Collect PCAPs
Best practices
Minimal ruleset
Extended ruleset
Magic Transit egress
Tutorials
GraphQL Analytics
Reference
Magic Firewall fields
Magic Firewall functions

Edit Edit this page

Issue Report an issue with this page

Log in Log into the Cloudflare dashboard

Set theme to dark (⇧+D)

↑ Top

Products
Magic Firewall
About

About

Review the content below to learn more about concepts related to Magic Firewall.

Important

When using Magic Firewall alongside other Cloudflare services that proxy traffic (for example, CDN and Spectrum), be aware of the following:

Firewall rules that block traffic based on source IP address may not work as intended because rules are evaluated after Cloudflare terminates the incoming TCP connections.
You must allow Cloudflare IP addresses.
When using Magic Firewall, fragmented packets are reassembled into complete packets before they are inspected. As a result, you cannot create firewall rules for fragments.

Analytics
IDS
List types
Protocol validation rules
Ruleset logic
Traffic types

Cloudflare Dashboard Open external link · Community Open external link · Learning Center Open external link · Support Portal Open external link · Cookie Settings

Edit on GitHub Open external link · Updated January 17, 2024