From 3bc3d626a735c0b80fe4959377e6ac93765a981e Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Fri, 25 Apr 2025 17:00:22 -0500 Subject: [PATCH] Initial commit --- .../policies/gateway/network-policies/index.mdx | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/network-policies/index.mdx b/src/content/docs/cloudflare-one/policies/gateway/network-policies/index.mdx index 69d927a71542b1e..99eea114f46d18f 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/network-policies/index.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/network-policies/index.mdx @@ -5,7 +5,7 @@ sidebar: order: 3 --- -import { Details, InlineBadge, Render } from "~/components"; +import { Details, InlineBadge, Render, Badge } from "~/components"; :::note To enable this feature, download and deploy the [WARP client](/cloudflare-one/connections/connect-devices/warp/deployment/) on your devices. @@ -83,7 +83,7 @@ Policies with Allow actions allow network traffic to reach certain IPs or ports. | Destination IP | in | `92.100.02.102` | And | Allow | | Email | in | `*@example.com` | | | -### Audit SSH +### Audit SSH API value: `audit_ssh` @@ -117,17 +117,19 @@ API value: `audit_ssh` +:::caution +Gateway no longer supports the Audit SSH action for new policies. To log your SSH traffic, Cloudflare recommends deploying [Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/) for your SSH server and configuring [SSH command logs](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/#ssh-command-logs). +::: + Policies with Audit SSH actions allow administrators to log SSH traffic. Gateway will detect SSH traffic over port `22`. For example, the following configuration logs SSH commands sent to a given IP address: | Selector | Operator | Value | Action | | -------------- | -------- | -------------- | --------- | | Destination IP | in | `203.0.113.83` | Audit SSH | -For more information on SSH logging, refer to [Configure SSH proxy and command logs](/cloudflare-one/policies/gateway/network-policies/ssh-logging/). - -:::note Gateway only audits SSH traffic over port `22`. Non-standard ports, including those specified with the [Destination Port selector](#destination-port), are not supported. -::: + +For more information on SSH logging, refer to [Configure SSH proxy and command logs](/cloudflare-one/policies/gateway/network-policies/ssh-logging/). ### Block