diff --git a/public/__redirects b/public/__redirects index e4e6c653484..d8bbd5ae19b 100644 --- a/public/__redirects +++ b/public/__redirects @@ -2287,7 +2287,7 @@ /cloudflare-one/policies/zero-trust/common-configs/ /cloudflare-one/policies/access/ 301 /cloudflare-one/applications/casb/troubleshooting/ /cloudflare-one/applications/casb/troubleshooting/troubleshoot-integrations/ 301 /cloudflare-one/analytics/logs/activity-log/ /cloudflare-one/insights/logs/gateway-logs/ 301 -/cloudflare-one/identity/devices/os-version/ /cloudflare-one/identity/devices/warp-client-checks/os-version/ 301 +/cloudflare-one/identity/devices/os-version/ /cloudflare-one/reusable-components/posture-checks/client-checks/os-version/ 301 /cloudflare-one/insights/dex/fleet-status/ /cloudflare-one/insights/dex/monitoring/ 301 /cloudflare-one/policies/zero-trust/cors/ /cloudflare-one/access-controls/applications/http-apps/authorization-cookie/cors/ 301 /cloudflare-one/identity/users/groups/ /cloudflare-one/policies/access/groups/ 301 @@ -2320,7 +2320,7 @@ /cloudflare-one/tutorials/ssh/ /cloudflare-one/connections/connect-networks/use-cases/ssh/ 301 /support/traffic/argo-tunnel/ /cloudflare-one/connections/connect-networks/ 301 /cloudflare-one/faq/tunnel/ /cloudflare-one/faq/cloudflare-tunnels-faq/ 301 -/magic-wan/tutorials/warp/ /cloudflare-wan/zero-trust/warp/ 301 +/magic-wan/tutorials/warp/ /cloudflare-wan/zero-trust/cloudflare-one-client/ 301 /cloudflare-one/examples/ /cloudflare-one/api-terraform/ 301 /warp-client/teams/ /cloudflare-one/team-and-resources/devices/cloudflare-one-client/ 301 /cloudflare-one/integrations/identity-providers/azuread/ /cloudflare-one/integrations/identity-providers/entra-id/ 301 @@ -2360,8 +2360,8 @@ /cloudflare-one/identity/devices/access-integrations/mutual-tls-authentication/ /cloudflare-one/access-controls/service-credentials/mutual-tls-authentication/ 301 /cloudflare-one/identity/devices/crowdstrike/ /cloudflare-one/integrations/service-providers/crowdstrike/ 301 /cloudflare-one/identity/devices/microsoft/ /cloudflare-one/integrations/service-providers/microsoft/ 301 -/cloudflare-one/identity/devices/require-gateway/ /cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-gateway/ 301 -/cloudflare-one/identity/devices/require-warp/ /cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp/ 301 +/cloudflare-one/identity/devices/require-gateway/ /cloudflare-one/reusable-components/posture-checks/client-checks/require-gateway/ 301 +/cloudflare-one/identity/devices/require-warp/ /cloudflare-one/reusable-components/posture-checks/client-checks/require-warp/ 301 /cloudflare-one/identity/devices/service-providers/custom/ /cloudflare-one/integrations/service-providers/custom/ 301 /cloudflare-one/identity/devices/service-providers/ /cloudflare-one/integrations/service-providers/ 301 /cloudflare-one/policies/data-loss-prevention/exact-data-match/ /cloudflare-one/data-loss-prevention/detection-entries/#exact-data-match 301 @@ -2377,7 +2377,7 @@ /cloudflare-one/traffic-policies/initial-setup/network/ /cloudflare-one/traffic-policies/get-started/network/ 301 # More specific redirects from nav revamp (before catch-alls) -/cloudflare-one/identity/devices/access-integrations/tanium/ /cloudflare-one/reusable-components/posture-checks/warp-client-checks/tanium/ 301 +/cloudflare-one/identity/devices/access-integrations/tanium/ /cloudflare-one/reusable-components/posture-checks/client-checks/tanium/ 301 /cloudflare-one/identity/authorization-cookie/application-token/ /cloudflare-one/access-controls/applications/http-apps/authorization-cookie/application-token/ 301 /cloudflare-one/identity/authorization-cookie/validating-json/ /cloudflare-one/access-controls/applications/http-apps/authorization-cookie/validating-json/ 301 /cloudflare-one/identity/authorization-cookie/ /cloudflare-one/access-controls/applications/http-apps/authorization-cookie/ 301 @@ -2410,7 +2410,13 @@ /cloudflare-one/email-security/settings/trusted-domains/ /cloudflare-one/email-security/settings/detection-settings/trusted-domains/ 301 /cloudflare-one/email-security/monitoring/search-email/ /cloudflare-one/email-security/investigation/search-email/ 301 - +# WARP Client rename — file/folder slug renames +/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/ /cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/ 301 +/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-warp-to-tunnel/ /cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-device-client/ 301 +/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel/ /cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client/ 301 +/cloudflare-one/tutorials/warp-on-headless-linux/ /cloudflare-one/tutorials/deploy-client-headless-linux/ 301 +/cloudflare-wan/zero-trust/warp/ /cloudflare-wan/zero-trust/cloudflare-one-client/ 301 +/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/warp/ /cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-one-client/ 301 # ============================================================================ # DYNAMIC REDIRECTS @@ -2619,6 +2625,8 @@ /magic-network-monitoring/* /network-flow/:splat 301 # Cloudflare One Client (formerly WARP Client) +# Splat redirect for renamed posture checks folder +/cloudflare-one/reusable-components/posture-checks/warp-client-checks/* /cloudflare-one/reusable-components/posture-checks/client-checks/:splat 301 # Splat redirects for renamed sub-folders (most specific first) /cloudflare-one/team-and-resources/devices/warp/configure-warp/warp-settings/* /cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/settings/:splat 301 /cloudflare-one/team-and-resources/devices/warp/configure-warp/warp-modes/* /cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/:splat 301 diff --git a/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx b/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx index b4200fbe9b1..a7eb8bda99d 100644 --- a/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx +++ b/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx @@ -8,7 +8,7 @@ products: Organizations can now eliminate long-lived credentials from their SSH setup and enable strong multi-factor authentication for SSH access, similar to other Access applications, all while generating access and command logs. -SSH with [Access for Infrastructure](/cloudflare-one/access-controls/applications/non-http/infrastructure-apps/) uses short-lived SSH certificates from Cloudflare, eliminating SSH key management and reducing the security risks associated with lost or stolen keys. It also leverages a common deployment model for Cloudflare One customers: [WARP-to-Tunnel](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel/). +SSH with [Access for Infrastructure](/cloudflare-one/access-controls/applications/non-http/infrastructure-apps/) uses short-lived SSH certificates from Cloudflare, eliminating SSH key management and reducing the security risks associated with lost or stolen keys. It also leverages a common deployment model for Cloudflare One customers: [WARP-to-Tunnel](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client/). SSH with Access for Infrastructure enables you to: diff --git a/src/content/docs/cloudflare-one/access-controls/policies/index.mdx b/src/content/docs/cloudflare-one/access-controls/policies/index.mdx index 656123e54d9..3504367f97d 100644 --- a/src/content/docs/cloudflare-one/access-controls/policies/index.mdx +++ b/src/content/docs/cloudflare-one/access-controls/policies/index.mdx @@ -160,8 +160,8 @@ Non-identity attributes are polled continuously, meaning they are-evaluated with | SAML Group | Checks a SAML attribute name / value pair. This selector only displays if you use a [generic SAML](/cloudflare-one/integrations/identity-providers/generic-saml/) identity provider. | ✅ | ❌ | ✅ | | OIDC Claim | Checks an OIDC claim name / value pair. This selector only displays if you use a [generic OIDC](/cloudflare-one/integrations/identity-providers/generic-oidc/) identity provider. | ✅ | ❌ | ✅ | | Device posture | Checks device posture signals from the Cloudflare One Client or a third-party service provider. This selector only displays after you create a [device posture check](/cloudflare-one/reusable-components/posture-checks/). | ✅ | ✅ | ❌ | -| Warp | Checks that the device is connected to the Cloudflare One Client, including the consumer version. This selector only displays after you enable the [WARP posture check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp/). | ✅ | ✅ | ❌ | -| Gateway | Checks that the device is connected to your Zero Trust instance through the Cloudflare One Client. This selector only displays after you enable the [Gateway posture check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-gateway/). | ✅ | ✅ | ❌ | +| Warp | Checks that the device is connected to the Cloudflare One Client, including the consumer version. This selector only displays after you enable the [WARP posture check](/cloudflare-one/reusable-components/posture-checks/client-checks/require-warp/). | ✅ | ✅ | ❌ | +| Gateway | Checks that the device is connected to your Zero Trust instance through the Cloudflare One Client. This selector only displays after you enable the [Gateway posture check](/cloudflare-one/reusable-components/posture-checks/client-checks/require-gateway/). | ✅ | ✅ | ❌ | 1 For SaaS applications, Access can only enforce policies at the time of initial sign on and when reissuing the SaaS session. Once the user has diff --git a/src/content/docs/cloudflare-one/data-loss-prevention/dlp-policies/common-policies.mdx b/src/content/docs/cloudflare-one/data-loss-prevention/dlp-policies/common-policies.mdx index d86a3da3c41..9ca827f67e1 100644 --- a/src/content/docs/cloudflare-one/data-loss-prevention/dlp-policies/common-policies.mdx +++ b/src/content/docs/cloudflare-one/data-loss-prevention/dlp-policies/common-policies.mdx @@ -41,7 +41,7 @@ You can configure access on a per-user or group basis by adding [identity-based Many Android applications (such as Google Drive) use certificate pinning, which is incompatible with Gateway inspection. If needed, you can create a [Do Not Inspect policy](/cloudflare-one/traffic-policies/http-policies/#do-not-inspect) so that the app can continue to function on Android: -1. Set up an [OS version device posture check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version/) that checks for the Android operating system. +1. Set up an [OS version device posture check](/cloudflare-one/reusable-components/posture-checks/client-checks/os-version/) that checks for the Android operating system. 2. Create the following HTTP policy in Gateway: diff --git a/src/content/docs/cloudflare-one/insights/logs/posture-logs.mdx b/src/content/docs/cloudflare-one/insights/logs/posture-logs.mdx index 6d3b6daa18d..c4ebe602293 100644 --- a/src/content/docs/cloudflare-one/insights/logs/posture-logs.mdx +++ b/src/content/docs/cloudflare-one/insights/logs/posture-logs.mdx @@ -37,7 +37,7 @@ Enterprise users can generate more detailed logs with [Logpush](/cloudflare-one/ | Field | Description | | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Name** | Name of the [device posture check](/cloudflare-one/reusable-components/posture-checks/). | -| **Type** | Type of [Cloudflare One Client check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/) or [service provider check](/cloudflare-one/integrations/service-providers/). | +| **Type** | Type of [Cloudflare One Client check](/cloudflare-one/reusable-components/posture-checks/client-checks/) or [service provider check](/cloudflare-one/integrations/service-providers/). | | **Rule ID** | UUID of the device posture check. | | **Conditions met** | Whether the device passed or failed the posture check criteria. Evaluates to `true` if the **Received values** match the **Expected values**. | | **Expected values** | Values required to pass the device posture check. | diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname.mdx index da4dea5c064..871929f82af 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/connect-private-hostname.mdx @@ -36,7 +36,7 @@ Private hostname routing only works for applications connected with `cloudflared | Connector | Compatibility | Minimum version | | ------------------------------------------------------------------------------------------ | ------------- | -- | | [cloudflared](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/) | ✅ | 2025.7.0 | -| [Peer-to-peer](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/) | ❌ | | +| [Peer-to-peer](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/) | ❌ | | | [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/) | ❌ | | | [Cloudflare WAN](/cloudflare-wan/zero-trust/cloudflare-gateway/) | ❌ | | diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/index.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/index.mdx index b335147d92c..d59e27c820d 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/index.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/index.mdx @@ -18,6 +18,6 @@ Administrators can optionally set [Gateway network policies](/cloudflare-one/tra Here are the different ways you can connect your private network to Cloudflare: - [**cloudflared**](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/cloudflared/) installs on a server in your private network to create a secure, outbound tunnel to Cloudflare. Cloudflare Tunnel using `cloudflared` only proxies traffic initiated from a user to a server. Any service or application running behind the tunnel will use the server's default routing table for server-initiated connectivity. -- [**Peer-to-peer**](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/) uses the [Cloudflare One Client](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/) to establish peer-to-peer connectivity between two or more devices. Each device running the Cloudflare One Client can access services on any other device running the Cloudflare One Client via an assigned virtual IP address. +- [**Peer-to-peer**](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/) uses the [Cloudflare One Client](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/) to establish peer-to-peer connectivity between two or more devices. Each device running the Cloudflare One Client can access services on any other device running the Cloudflare One Client via an assigned virtual IP address. - [**WARP Connector**](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/) installs on a Linux server in your private network to establish site-to-site, bidirectional, and mesh networking connectivity. The WARP Connector acts as a subnet router to relay client-initiated and server-initiated traffic between all devices on a private network and Cloudflare. - [**Cloudflare WAN**](/cloudflare-one/networks/connectors/cloudflare-wan/) relies on configuring legacy networking equipment to establish anycast GRE or IPsec tunnels between an entire network location and Cloudflare. diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer.mdx similarity index 100% rename from src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp.mdx rename to src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer.mdx diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/index.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/index.mdx index 1a483ae18c7..05577ff248c 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/index.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/index.mdx @@ -13,5 +13,5 @@ With Cloudflare Zero Trust, you can make your RDP server available over the Inte Cloudflare offers three ways to secure RDP: - [Browser-based RDP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser/) -- [RDP with Cloudflare One Client](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-warp-to-tunnel/) +- [RDP with Cloudflare One Client](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-device-client/) - [RDP with client-side cloudflared](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-cloudflared-authentication/) \ No newline at end of file diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser.mdx index 4cab2d67911..668b4c82a9d 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser.mdx @@ -17,7 +17,7 @@ There are two ways for users to [reach the RDP server in their browser](#4-conne - **App Launcher (recommended)**: Users can log in to the [Access App Launcher](/cloudflare-one/access-controls/access-settings/app-launcher/) with their Cloudflare Access credentials and then initiate an RDP connection within the browser to their Windows machine. Users will authenticate to the Windows machine using their pre-configured Windows username and password. Cloudflare does not manage any credentials on the Windows server. - **Direct URL**: A user may also navigate directly to the Windows server at `https:///rdp///`, where `vnet-id` is the virtual network assigned to the Cloudflare Tunnel route. The authentication flow is the same as for the App Launcher; first users must log in to Cloudflare Access and then use their Windows credentials to authenticate to the Windows machine. -Browser-based RDP can be used in conjunction with [routing over WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-warp-to-tunnel/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. +Browser-based RDP can be used in conjunction with [the Cloudflare One Client](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-device-client/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. ## Prerequisites diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-cloudflared-authentication.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-cloudflared-authentication.mdx index b94656145b1..4536feca6b0 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-cloudflared-authentication.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-cloudflared-authentication.mdx @@ -12,7 +12,7 @@ import { Render } from "~/components"; End users can connect to an RDP server without the Cloudflare One Client by authenticating through `cloudflared` in their native terminal. This method requires having `cloudflared` installed on both the server machine and on the client machine, as well as an active zone on Cloudflare. The traffic is proxied over this connection, and the user logs in to the server with their Cloudflare Access credentials. -Client-side `cloudflared` can be used in conjunction with [routing over WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-warp-to-tunnel/) and [Browser-based RDP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. +Client-side `cloudflared` can be used in conjunction with [the Cloudflare One Client](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-device-client/) and [Browser-based RDP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-browser/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. ## 1. Connect the server to Cloudflare diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-warp-to-tunnel.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-device-client.mdx similarity index 100% rename from src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-warp-to-tunnel.mdx rename to src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/rdp/rdp-device-client.mdx diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/index.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/index.mdx index 27ca438faf7..1a325fbf79a 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/index.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/index.mdx @@ -49,7 +49,7 @@ Cloudflare offers four ways to secure SSH: diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-browser-rendering.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-browser-rendering.mdx index 3da5b53452f..e6573452685 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-browser-rendering.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-browser-rendering.mdx @@ -14,7 +14,7 @@ Cloudflare's browser-based terminal allows end users to connect to an SSH server This method requires routing SSH access to the server through a public hostname. The traffic is proxied over this connection, and the user logs in to the server with their Cloudflare Access credentials. -The browser-based terminal can be used in conjunction with [routing over WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel/) and [Access for Infrastructure](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. +The browser-based terminal can be used in conjunction with [the Cloudflare One Client](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client/) and [Access for Infrastructure](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. ## 1. Connect the server to Cloudflare diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-cloudflared-authentication.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-cloudflared-authentication.mdx index 73ce842ef8f..cadb8b9b61d 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-cloudflared-authentication.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-cloudflared-authentication.mdx @@ -12,7 +12,7 @@ import { Render } from "~/components"; End users can connect to an SSH server without the Cloudflare One Client by authenticating through `cloudflared` in their native terminal. This method requires having `cloudflared` installed on both the server machine and on the client machine, as well as an active zone on Cloudflare. The traffic is proxied over this connection, and the user logs in to the server with their Cloudflare Access credentials. -Client-side `cloudflared` can be used in conjunction with [routing over WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel/) and [Access for Infrastructure](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. +Client-side `cloudflared` can be used in conjunction with [the Cloudflare One Client](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client/) and [Access for Infrastructure](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access/) so that there are multiple ways to connect to the server. You can reuse the same Cloudflare Tunnel when configuring each connection method. ## 1. Connect the server to Cloudflare diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client.mdx similarity index 100% rename from src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel.mdx rename to src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client.mdx diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access.mdx index b1129a5ec1c..7a0ba9f511e 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-infrastructure-access.mdx @@ -10,7 +10,7 @@ sidebar: import { Tabs, TabItem, Badge, Render, APIRequest } from "~/components"; -[Access for Infrastructure](/cloudflare-one/access-controls/applications/non-http/infrastructure-apps/) provides granular control over how users can connect to your SSH servers. This feature uses the same deployment model as [WARP-to-Tunnel](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-warp-to-tunnel/) but unlocks more policy options and command logging functionality. +[Access for Infrastructure](/cloudflare-one/access-controls/applications/non-http/infrastructure-apps/) provides granular control over how users can connect to your SSH servers. Like the [self-managed SSH keys](/cloudflare-one/networks/connectors/cloudflare-tunnel/use-cases/ssh/ssh-device-client/) method, it uses the Cloudflare One Client on user devices and Cloudflare Tunnel on the server to create a secure, private connection through Cloudflare's network. Access for Infrastructure adds application-level policies with per-target and per-username controls, as well as SSH command logging. \ No newline at end of file diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/on-ramps.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/on-ramps.mdx index 0548e294b60..1f38bc9bdf8 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/on-ramps.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/on-ramps.mdx @@ -18,7 +18,7 @@ import { Render } from "~/components"; thirdPartyURL: "/cloudflare-one/networks/connectors/cloudflare-wan/configuration/manually/third-party/", cniURL: "/cloudflare-one/networks/connectors/cloudflare-wan/network-interconnect/", cfTunnelURL: "/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-tunnel/", - warpURL: "/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/warp/", + warpURL: "/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-one-client/", thirdPartyIntegrationURL: "/cloudflare-one/networks/connectors/cloudflare-wan/configuration/manually/third-party/" }} /> diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-gateway.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-gateway.mdx index 406af50dba3..cbee5965e45 100644 --- a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-gateway.mdx +++ b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-gateway.mdx @@ -13,13 +13,13 @@ import { Render } from "~/components"; product="networking-services" params={{ gatewayURL: "/cloudflare-one/traffic-policies/", - warpURL: "/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/warp/", + warpURL: "/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-one-client/", cfAutoCertificatesURL: "/cloudflare-one/team-and-resources/devices/user-side-certificates/automated-deployment/", cfManualCertificatesURL: "/cloudflare-one/team-and-resources/devices/user-side-certificates/manual-deployment/", decryptTlsURL: "/cloudflare-one/traffic-policies/http-policies/tls-decryption/", doNotInspectURL: "/cloudflare-one/traffic-policies/http-policies/#do-not-inspect", - warpChecksURL: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", - osVersionChecks: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version/", + warpChecksURL: "/cloudflare-one/reusable-components/posture-checks/client-checks/", + osVersionChecks: "/cloudflare-one/reusable-components/posture-checks/client-checks/os-version/", mwanOnrampsURL: "/cloudflare-one/networks/connectors/cloudflare-wan/on-ramps/", gatewayResolverPoliciesURL: "/cloudflare-one/traffic-policies/resolver-policies/", gatewayInternalDnsURL: "/cloudflare-one/traffic-policies/resolver-policies/#internal-dns", diff --git a/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/warp.mdx b/src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-one-client.mdx similarity index 100% rename from src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/warp.mdx rename to src/content/docs/cloudflare-one/networks/connectors/cloudflare-wan/zero-trust/cloudflare-one-client.mdx diff --git a/src/content/docs/cloudflare-one/networks/routes/reserved-ips.mdx b/src/content/docs/cloudflare-one/networks/routes/reserved-ips.mdx index bf2b2e08acf..8239e44a2c6 100644 --- a/src/content/docs/cloudflare-one/networks/routes/reserved-ips.mdx +++ b/src/content/docs/cloudflare-one/networks/routes/reserved-ips.mdx @@ -55,7 +55,7 @@ Initial resolved IPs are assigned from the `100.80.0.0/16` (IPv4) or `2606:4700: device IPs are virtual addresses assigned to each device registration. These IPs identify and route traffic to specific devices for the following features: -- [Peer-to-peer connectivity (Peer-to-peer)](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/) — allows devices to communicate directly with each other over Cloudflare's network. +- [Peer-to-peer connectivity (Peer-to-peer)](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/) — allows devices to communicate directly with each other over Cloudflare's network. - [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/) — routes traffic between your private network and WARP devices. - [Cloudflare WAN](/cloudflare-one/networks/connectors/cloudflare-wan/) — on-ramps traffic from WAN tunnels to Cloudflare One Client devices. diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/antivirus.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/antivirus.mdx similarity index 97% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/antivirus.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/antivirus.mdx index d87eada7c10..55d7cd7fa6d 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/antivirus.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/antivirus.mdx @@ -19,7 +19,7 @@ The Antivirus device posture attribute checks if any antivirus software is insta product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/application-check.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/application-check.mdx similarity index 98% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/application-check.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/application-check.mdx index da4e2aa17e0..f4c1fbe2380 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/application-check.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/application-check.mdx @@ -16,7 +16,7 @@ The Application Check device posture attribute checks that a specific applicatio product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/carbon-black.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/carbon-black.mdx similarity index 95% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/carbon-black.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/carbon-black.mdx index 05776d6051d..e6688f964be 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/carbon-black.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/carbon-black.mdx @@ -17,7 +17,7 @@ Cloudflare One can check if [Carbon Black](https://www.carbonblack.com/) is runn product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/client-certificate.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/client-certificate.mdx similarity index 100% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/client-certificate.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/client-certificate.mdx diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/corp-device.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/corp-device.mdx similarity index 93% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/corp-device.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/corp-device.mdx index 4265a81bb0b..956f6bf1e19 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/corp-device.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/corp-device.mdx @@ -16,7 +16,7 @@ Cloudflare One allows you to build Zero Trust rules based on device serial numbe product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> @@ -71,4 +71,4 @@ You can use the following commands to check the serial number of your device. Th ### iOS, Android and ChromeOS -Serial number checks are not supported on mobile devices. You can identify mobile devices by a [unique client ID](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid) instead of by serial number. +Serial number checks are not supported on mobile devices. You can identify mobile devices by a [unique client ID](/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid) instead of by serial number. diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid.mdx similarity index 97% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid.mdx index 29938a2ef24..36b68f9806a 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid.mdx @@ -16,7 +16,7 @@ Cloudflare One allows you to build Zero Trust rules based on device UUIDs suppli product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/disk-encryption.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/disk-encryption.mdx similarity index 97% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/disk-encryption.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/disk-encryption.mdx index 1c8d22521c1..63f5bffc4b8 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/disk-encryption.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/disk-encryption.mdx @@ -19,7 +19,7 @@ The Disk Encryption device posture attribute ensures that disks are encrypted on product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/domain-joined.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/domain-joined.mdx similarity index 94% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/domain-joined.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/domain-joined.mdx index bf088bf9e46..cbc11581562 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/domain-joined.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/domain-joined.mdx @@ -19,7 +19,7 @@ The Domain Joined device posture attribute ensures that a user is a member of a product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/file-check.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/file-check.mdx similarity index 72% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/file-check.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/file-check.mdx index f217ab35cf3..dedfd613808 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/file-check.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/file-check.mdx @@ -16,7 +16,7 @@ The File Check device posture attribute checks for the presence of a file on a d product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> @@ -32,8 +32,8 @@ The File Check device posture attribute checks for the presence of a file on a d 1. **Name**: Enter a unique name for this device posture check. 2. **Operating system**: Select your operating system. 3. **File Path**: Enter a file path (for example, `c:\my folder\myfile.exe`). - 4. **Signing certificate thumbprint (recommended)**: Enter the [thumbprint](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/application-check/#determine-the-signing-thumbprint) of the publishing certificate used to sign the file. Adding this information will enable the check to ensure that the file was signed by the expected software developer. - 5. **SHA-256 (optional)**: Enter the [SHA-256 value](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/application-check/#determine-the-sha-256-value) of the file. This is used to ensure the integrity of the file on the device. + 4. **Signing certificate thumbprint (recommended)**: Enter the [thumbprint](/cloudflare-one/reusable-components/posture-checks/client-checks/application-check/#determine-the-signing-thumbprint) of the publishing certificate used to sign the file. Adding this information will enable the check to ensure that the file was signed by the expected software developer. + 5. **SHA-256 (optional)**: Enter the [SHA-256 value](/cloudflare-one/reusable-components/posture-checks/client-checks/application-check/#determine-the-sha-256-value) of the file. This is used to ensure the integrity of the file on the device. 5. Select **Save**. diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/firewall.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/firewall.mdx similarity index 96% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/firewall.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/firewall.mdx index 1a91f86a2af..d1916644dc0 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/firewall.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/firewall.mdx @@ -19,7 +19,7 @@ The Firewall device posture attribute ensures that a firewall is running on a de product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/index.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/index.mdx similarity index 50% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/index.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/index.mdx index 0eceb1f5f27..ae9fd69d4c6 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/index.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/index.mdx @@ -18,18 +18,18 @@ These device posture checks are performed by the [Cloudflare One Client](/cloudf | Device posture check | macOS | Windows | Linux | iOS | Android/ChromeOS | | --------------------------------------------------------------------------------------------- | ----- | ------- | ----------- | --- | ---------------- | -| [Antivirus](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/antivirus/) | ❌ | ✅ | ❌ | ❌ | ❌ | -| [Application check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/application-check/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Carbon Black](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/carbon-black/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Client certificate](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/client-certificate/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Device serial numbers](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/corp-device/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Device UUID](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid/) | ❌ | ❌ | ❌ | ✅ | ✅ | -| [Disk encryption](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/disk-encryption/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Domain joined](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/domain-joined/) | ❌ | ✅ | ❌ | ❌ | ❌ | -| [File check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/file-check/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Firewall](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/firewall/) | ✅ | ✅ | ❌ | ❌ | ❌ | -| [OS version](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version/) | ✅ | ✅ | ✅ | ✅ | ✅ | -| [Require Gateway](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-gateway/) | ✅ | ✅ | ✅ | ✅ | ✅ | -| [Require WARP](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp/) | ✅ | ✅ | ✅ | ✅ | ✅ | -| [SentinelOne](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/sentinel-one/) | ✅ | ✅ | ✅ | ❌ | ❌ | -| [Tanium (legacy)](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/tanium/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Antivirus](/cloudflare-one/reusable-components/posture-checks/client-checks/antivirus/) | ❌ | ✅ | ❌ | ❌ | ❌ | +| [Application check](/cloudflare-one/reusable-components/posture-checks/client-checks/application-check/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Carbon Black](/cloudflare-one/reusable-components/posture-checks/client-checks/carbon-black/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Client certificate](/cloudflare-one/reusable-components/posture-checks/client-checks/client-certificate/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Device serial numbers](/cloudflare-one/reusable-components/posture-checks/client-checks/corp-device/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Device UUID](/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid/) | ❌ | ❌ | ❌ | ✅ | ✅ | +| [Disk encryption](/cloudflare-one/reusable-components/posture-checks/client-checks/disk-encryption/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Domain joined](/cloudflare-one/reusable-components/posture-checks/client-checks/domain-joined/) | ❌ | ✅ | ❌ | ❌ | ❌ | +| [File check](/cloudflare-one/reusable-components/posture-checks/client-checks/file-check/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Firewall](/cloudflare-one/reusable-components/posture-checks/client-checks/firewall/) | ✅ | ✅ | ❌ | ❌ | ❌ | +| [OS version](/cloudflare-one/reusable-components/posture-checks/client-checks/os-version/) | ✅ | ✅ | ✅ | ✅ | ✅ | +| [Require Gateway](/cloudflare-one/reusable-components/posture-checks/client-checks/require-gateway/) | ✅ | ✅ | ✅ | ✅ | ✅ | +| [Require WARP](/cloudflare-one/reusable-components/posture-checks/client-checks/require-warp/) | ✅ | ✅ | ✅ | ✅ | ✅ | +| [SentinelOne](/cloudflare-one/reusable-components/posture-checks/client-checks/sentinel-one/) | ✅ | ✅ | ✅ | ❌ | ❌ | +| [Tanium (legacy)](/cloudflare-one/reusable-components/posture-checks/client-checks/tanium/) | ✅ | ✅ | ✅ | ❌ | ❌ | diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/os-version.mdx similarity index 98% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/os-version.mdx index 09196c178cc..c6f5a66910b 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/os-version.mdx @@ -16,7 +16,7 @@ The OS Version device posture attribute checks whether the version of a device's product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-gateway.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/require-gateway.mdx similarity index 75% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-gateway.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/require-gateway.mdx index 3c98c7ac716..27f11840753 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-gateway.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/require-gateway.mdx @@ -10,7 +10,7 @@ head: import { Render } from "~/components"; -With Require Gateway, you can allow access to your applications only to devices enrolled in your Zero Trust organization. Unlike [Require WARP](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp/), which will check for any WARP instance (including the consumer version), Require Gateway will only allow requests coming from devices whose traffic is filtered by your organization's Cloudflare Gateway configuration. This policy is best used when you want to protect company-owned assets by only allowing access to employees. +With Require Gateway, you can allow access to your applications only to devices enrolled in your Zero Trust organization. Unlike [Require WARP](/cloudflare-one/reusable-components/posture-checks/client-checks/require-warp/), which will check for any WARP instance (including the consumer version), Require Gateway will only allow requests coming from devices whose traffic is filtered by your organization's Cloudflare Gateway configuration. This policy is best used when you want to protect company-owned assets by only allowing access to employees. ## Prerequisites @@ -19,7 +19,7 @@ With Require Gateway, you can allow access to your applications only to devices product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/require-warp.mdx similarity index 95% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/require-warp.mdx index 8d82ff48df2..d0f5e1aa76d 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/require-warp.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/require-warp.mdx @@ -25,7 +25,7 @@ Cloudflare One enables you to restrict access to your applications to devices ru product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/sentinel-one.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/sentinel-one.mdx similarity index 96% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/sentinel-one.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/sentinel-one.mdx index 6e0bb9a69fe..513e4b6a9bf 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/sentinel-one.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/sentinel-one.mdx @@ -20,7 +20,7 @@ Cloudflare One can check if [SentinelOne](https://www.sentinelone.com/) is runni product="cloudflare-one" params={{ name: "Cloudflare One Client Checks", - link: "/cloudflare-one/reusable-components/posture-checks/warp-client-checks/", + link: "/cloudflare-one/reusable-components/posture-checks/client-checks/", }} /> diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/tanium.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/tanium.mdx similarity index 100% rename from src/content/docs/cloudflare-one/reusable-components/posture-checks/warp-client-checks/tanium.mdx rename to src/content/docs/cloudflare-one/reusable-components/posture-checks/client-checks/tanium.mdx diff --git a/src/content/docs/cloudflare-one/reusable-components/posture-checks/index.mdx b/src/content/docs/cloudflare-one/reusable-components/posture-checks/index.mdx index c9fcd3b7b4c..4c1a1de0d3b 100644 --- a/src/content/docs/cloudflare-one/reusable-components/posture-checks/index.mdx +++ b/src/content/docs/cloudflare-one/reusable-components/posture-checks/index.mdx @@ -13,7 +13,7 @@ With Cloudflare Zero Trust, you can configure Zero Trust policies that rely on a Setup instructions and requirements vary depending on the device posture attribute. Refer to the links below to view the setup guide for your provider. -- [Cloudflare One Client checks](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/) are performed by the Cloudflare One Client. +- [Cloudflare One Client checks](/cloudflare-one/reusable-components/posture-checks/client-checks/) are performed by the Cloudflare One Client. - [Service-to-service checks](/cloudflare-one/integrations/service-providers/) are performed by third-party device posture providers. - [Access integration checks](/cloudflare-one/reusable-components/posture-checks/access-integrations/) are only configurable for Access applications. These attributes cannot be used in Gateway policies. @@ -32,12 +32,12 @@ You can now use your device posture check in an [Access policy](/cloudflare-one/ :::caution[Gateway policy limitation] -Gateway does not support device posture checks for the [Tanium Access integration](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/tanium/). +Gateway does not support device posture checks for the [Tanium Access integration](/cloudflare-one/reusable-components/posture-checks/client-checks/tanium/). ::: ## 4. Ensure traffic is going through the Cloudflare One Client -[Cloudflare One Client](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/) and [service-to-service](/cloudflare-one/integrations/service-providers/) posture checks rely on traffic going through the Cloudflare One Client to detect posture information for a device. In your [Split Tunnel configuration](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/split-tunnels/), ensure that the following domains are included in the Cloudflare One Client: +[Cloudflare One Client](/cloudflare-one/reusable-components/posture-checks/client-checks/) and [service-to-service](/cloudflare-one/integrations/service-providers/) posture checks rely on traffic going through the Cloudflare One Client to detect posture information for a device. In your [Split Tunnel configuration](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/split-tunnels/), ensure that the following domains are included in the Cloudflare One Client: - The IdP used to authenticate to Cloudflare Zero Trust if posture check is part of an Access policy. - `.cloudflareaccess.com` if posture check is part of an Access policy. diff --git a/src/content/docs/cloudflare-one/setup/replace-vpn/device-to-device.mdx b/src/content/docs/cloudflare-one/setup/replace-vpn/device-to-device.mdx index 73f5ca34bfd..f6c28cad4d6 100644 --- a/src/content/docs/cloudflare-one/setup/replace-vpn/device-to-device.mdx +++ b/src/content/docs/cloudflare-one/setup/replace-vpn/device-to-device.mdx @@ -21,7 +21,7 @@ This guide follows the same steps as the **Get Started** onboarding wizard in th ## How it works -The [Cloudflare One Client](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/) is an app that you install on each device you want to connect. When you sign in to your Cloudflare account through the Cloudflare One Client (called "enrolling"), each device is assigned a [virtual IP address](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/). +The [Cloudflare One Client](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/) is an app that you install on each device you want to connect. When you sign in to your Cloudflare account through the Cloudflare One Client (called "enrolling"), each device is assigned a [virtual IP address](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/). Devices use these virtual IPs to communicate with each other through Cloudflare's network. This works for most common types of network traffic, including web requests, remote desktop, file sharing, and ping. @@ -91,6 +91,6 @@ For in-depth guidance on policy design and device posture checks, refer to the [ If you have issues connecting, try these steps: -- **Windows users**: Windows Firewall blocks device-to-device traffic by default. You may need to add a firewall rule that allows incoming traffic from `100.96.0.0/12`. For details, refer to [Peer-to-peer connectivity](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/#troubleshooting). +- **Windows users**: Windows Firewall blocks device-to-device traffic by default. You may need to add a firewall rule that allows incoming traffic from `100.96.0.0/12`. For details, refer to [Peer-to-peer connectivity](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/#troubleshooting). - [Troubleshoot WARP](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/): resolve Cloudflare One Client connection and enrollment issues. -- [Peer-to-peer connectivity](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/): review Peer-to-peer setup details and firewall requirements. +- [Peer-to-peer connectivity](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/): review Peer-to-peer setup details and firewall requirements. diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-ips.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-ips.mdx index db047ec5c4d..9cfb08c6de3 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-ips.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-ips.mdx @@ -26,7 +26,7 @@ import { Render, Details } from "~/components"; -A device IP identifies and routes traffic to a specific device in your Zero Trust organization. When a user registers the Cloudflare One Client (formerly WARP), Cloudflare assigns a virtual IPv4 and IPv6 address to the [device registration](/cloudflare-one/team-and-resources/devices/device-registration/). The Cloudflare One Client uses these IP addresses to create a [virtual network interface](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/client-architecture/#ip-traffic) on the device, which allows your private network to reach the device via [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/), [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/), or [Cloudflare WAN](/cloudflare-one/networks/connectors/cloudflare-wan/) on-ramps. +A device IP identifies and routes traffic to a specific device in your Zero Trust organization. When a user registers the Cloudflare One Client (formerly WARP), Cloudflare assigns a virtual IPv4 and IPv6 address to the [device registration](/cloudflare-one/team-and-resources/devices/device-registration/). The Cloudflare One Client uses these IP addresses to create a [virtual network interface](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/client-architecture/#ip-traffic) on the device, which allows your private network to reach the device via [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/), [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/), or [Cloudflare WAN](/cloudflare-one/networks/connectors/cloudflare-wan/) on-ramps. You can verify device IPs and, if needed, reconfigure address pools to avoid overlapping IPs with existing internal resources. diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-profiles.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-profiles.mdx index e89d240c6a6..1a48aeb63d0 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-profiles.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-profiles.mdx @@ -186,7 +186,7 @@ Apply a device profile based on the operating system of the device. ### Operating system version -Apply a device profile based on the [OS version](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/os-version/#determine-the-os-version) of the device. +Apply a device profile based on the [OS version](/cloudflare-one/reusable-components/posture-checks/client-checks/os-version/#determine-the-os-version) of the device. | UI name | API example | | ------------------------ | ------------------------- | diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/device-information-only.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/device-information-only.mdx index 6cf715f7b68..3d89d2d6927 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/device-information-only.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/device-information-only.mdx @@ -120,7 +120,7 @@ To block traffic from devices that do not have a valid client certificate: | Hostname | equals | `app.mycompany.com` | | | 5. Select **Deploy**. -Posture only mode is now enabled on the device. To start enforcing device posture, set up a [WARP client check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/) and add a _Require_ device posture rule to your [Access policy](/cloudflare-one/access-controls/policies/). When the device connects to the Access application for the first time, the browser will ask to use the client certificate installed by the Cloudflare One Client. +Posture only mode is now enabled on the device. To start enforcing device posture, set up a [WARP client check](/cloudflare-one/reusable-components/posture-checks/client-checks/) and add a _Require_ device posture rule to your [Access policy](/cloudflare-one/access-controls/policies/). When the device connects to the Access application for the first time, the browser will ask to use the client certificate installed by the Cloudflare One Client. ![Browser prompts for client diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/index.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/index.mdx index ca2ec558764..d5b28586b40 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/index.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/index.mdx @@ -93,7 +93,7 @@ To make more complex routing decisions (such as, routing traffic directly to the The Cloudflare One Client only provides asynchronous information to provide device health and posture data, which can be referenced in security policies. The client does not control device routing or forward DNS resolution. -Use when you only want to enforce [Cloudflare One Client device posture checks](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/) for zones in your account. To set up Posture only mode, refer to the [dedicated page](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/device-information-only/). +Use when you only want to enforce [Cloudflare One Client device posture checks](/cloudflare-one/reusable-components/posture-checks/client-checks/) for zones in your account. To set up Posture only mode, refer to the [dedicated page](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/modes/device-information-only/). | DNS filtering | Network filtering | HTTP filtering | Features enabled | | ------------- | ----------------- | -------------- | ------------------------------------------------------------------------------------ | diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/settings/index.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/settings/index.mdx index 850b355786b..df923886909 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/settings/index.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/settings/index.mdx @@ -144,12 +144,12 @@ The IP assigned to a device is permanent until the device unregisters from your -Allows traffic on-ramped using [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/), [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/), or [Cloudflare WAN](/cloudflare-one/networks/connectors/cloudflare-wan/) to route to devices enrolled in your Zero Trust organization. +Allows traffic on-ramped using [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/), [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/), or [Cloudflare WAN](/cloudflare-one/networks/connectors/cloudflare-wan/) to route to devices enrolled in your Zero Trust organization. Each device is assigned a virtual IP address in the CGNAT IP space (`100.96.0.0/12`) or a [custom device IP range](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/device-ips/). With this setting `Enabled`, users on your private network will be able to connect to these device IPs and access [TCP, UDP, and/or ICMP-based services](/cloudflare-one/traffic-policies/proxy/) on your devices. You can create [Gateway network policies](/cloudflare-one/traffic-policies/network-policies/) to control which users and devices can access the device IPs. :::note -Ensure that traffic destined to your device IPs routes from your private network to Cloudflare Gateway. For example, if you are making a [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/) connection, you must configure your [Split Tunnel settings](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/split-tunnels/) so that traffic to your device IPs routes through the WARP tunnel. +Ensure that traffic destined to your device IPs routes from your private network to Cloudflare Gateway. For example, if you are making a [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/) connection, you must configure your [Split Tunnel settings](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/configure/route-traffic/split-tunnels/) so that traffic to your device IPs routes through the WARP tunnel. ::: ## Global disconnection settings @@ -177,7 +177,7 @@ Ensure that traffic destined to your device IPs routes from your private network Requires the [Super Administrator](/cloudflare-one/roles-permissions/) role. ::: -**Disconnect WARP on all devices** allows administrators to fail open the Cloudflare One Client in case of an incident occurring in your environment, independent from incidents or outages affecting Cloudflare's services. When you turn on **Disconnect WARP on all devices**, Cloudflare will disconnect all Windows, macOS, and Linux Cloudflare One Clients that are connected to your Zero Trust organization. This includes end user devices, [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/) hosts, and [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-to-warp/) devices. End users will receive a notification on their device and the Cloudflare One Client will display [`Admin directed disconnect`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/client-errors/#admin-directed-disconnect). +**Disconnect WARP on all devices** allows administrators to fail open the Cloudflare One Client in case of an incident occurring in your environment, independent from incidents or outages affecting Cloudflare's services. When you turn on **Disconnect WARP on all devices**, Cloudflare will disconnect all Windows, macOS, and Linux Cloudflare One Clients that are connected to your Zero Trust organization. This includes end user devices, [WARP Connector](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/warp-connector/) hosts, and [WARP-to-WARP](/cloudflare-one/networks/connectors/cloudflare-tunnel/private-net/peer-to-peer/) devices. End users will receive a notification on their device and the Cloudflare One Client will display [`Admin directed disconnect`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/client-errors/#admin-directed-disconnect). To resume normal operations, turn off **Disconnect WARP on all devices**. The Cloudflare One Client will automatically reconnect. diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/index.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/index.mdx index f4d9f0b64fe..0f906b7f1ad 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/index.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/index.mdx @@ -157,7 +157,7 @@ The Cloudflare One Client for Linux allows for an automated install via the pres Refer to [deployment parameters](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/) for a list of accepted arguments. -To learn how to automate Cloudflare One Client deployment on headless servers, refer to our [tutorial](/cloudflare-one/tutorials/warp-on-headless-linux/). +To learn how to automate Cloudflare One Client deployment on headless servers, refer to our [tutorial](/cloudflare-one/tutorials/deploy-client-headless-linux/). ## iOS diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters.mdx index 9f787112bac..ecb7fc9bb41 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters.mdx @@ -344,7 +344,7 @@ This parameter replaces the old `enabled` property, which can no longer be used Only valid for iOS and Android/ChromeOS. ::: -Assigns a unique identifier to the device for the [device UUID posture check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid). +Assigns a unique identifier to the device for the [device UUID posture check](/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid). **Value Type:** `string` diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/partners/intune.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/partners/intune.mdx index 04a44d75c78..bedcbf31235 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/partners/intune.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/partners/intune.mdx @@ -442,7 +442,7 @@ By completing this step, you preconfigure the Cloudflare One Agent with your [Ze ### Intune configuration -Intune allows you to insert [predefined variables](https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios#tokens-used-in-the-property-list) into the XML configuration file. For example, you can set the [`unique_client_id`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/#unique_client_id) key to `{{deviceid}}` for a [device UUID posture check](/cloudflare-one/reusable-components/posture-checks/warp-client-checks/device-uuid/) deployment. +Intune allows you to insert [predefined variables](https://learn.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios#tokens-used-in-the-property-list) into the XML configuration file. For example, you can set the [`unique_client_id`](/cloudflare-one/team-and-resources/devices/cloudflare-one-client/deployment/mdm-deployment/parameters/#unique_client_id) key to `{{deviceid}}` for a [device UUID posture check](/cloudflare-one/reusable-components/posture-checks/client-checks/device-uuid/) deployment. ### Per-app VPN for iOS diff --git a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/diagnostic-logs.mdx b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/diagnostic-logs.mdx index d347e393e6b..7ab7e957d59 100644 --- a/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/diagnostic-logs.mdx +++ b/src/content/docs/cloudflare-one/team-and-resources/devices/cloudflare-one-client/troubleshooting/diagnostic-logs.mdx @@ -113,7 +113,7 @@ The `warp-debugging-info--