From 4e176d2d04e3c5443e5fe4d8f65af42053b97c44 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 19 Feb 2025 14:36:32 -0600 Subject: [PATCH 1/3] Add changelog entry --- src/content/release-notes/gateway.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/content/release-notes/gateway.yaml b/src/content/release-notes/gateway.yaml index 30b41c3723441d..3fd26b5c64a037 100644 --- a/src/content/release-notes/gateway.yaml +++ b/src/content/release-notes/gateway.yaml @@ -5,10 +5,14 @@ productLink: "/cloudflare-one/policies/gateway/" productArea: Cloudflare One productAreaLink: /cloudflare-one/changelog/ entries: + - publish_date: "2025-02-13" + title: Unscannable files for Download and Upload File Types selectors + description: |- + Gateway and DLP users can now match unscannable files with the Download and Upload File Types traffic selectors for HTTP policies. This update allows users to block files that are password-protected, compressed, or otherwise unscannable. - publish_date: "2025-02-12" - title: The default global Cloudflare root certificate expired on 2025-02-02 at 16:05 UTC + title: Upload/Download File Size selectors for HTTP policies description: |- - Gateway and DLP users can now create HTTP policies with the [Upload/Download File Size (MiB)](/cloudflare-one/policies/gateway/http-policies/#download-and-upload-file-size) traffic selectors. This update allows users to block uploads or downloads based on file size. + Gateway and DLP users can now create HTTP policies with the [Download and Upload File Size (MiB)](/cloudflare-one/policies/gateway/http-policies/#download-and-upload-file-size) traffic selectors. This update allows users to block uploads or downloads based on file size. - publish_date: "2025-02-02" title: The default global Cloudflare root certificate expired on 2025-02-02 at 16:05 UTC description: |- From 1ec9404ccbc8f2281e035d78b8ce31849e37ef6e Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 19 Feb 2025 14:39:43 -0600 Subject: [PATCH 2/3] Add unscannable files to list --- .../policies/gateway/http-policies/index.mdx | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx b/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx index 300981c4b23c6f..1a9a99c3c5f2ea 100644 --- a/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx +++ b/src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx @@ -482,7 +482,7 @@ Use these selectors to limit the file size of upload or download transactions. F The **Download File Types** and **Upload File Types** selectors supersede the **Download File Type** and **Upload File Type** selectors. Gateway will still evaluate policies with the previous selectors. However, Cloudflare recommends migrating any policies with deprecated selectors to the new corresponding selectors. ::: -These selectors will scan file signatures in the HTTP body. You can select from file categories or specific file types, such as executables, archives and compressed files, Microsoft 365/Office documents, and Adobe files: +These selectors will scan file signatures in the HTTP body. You can select from file categories or specific file types, such as executables, archives and compressed files, unscannable files, Microsoft 365/Office documents, and Adobe files:
@@ -529,6 +529,13 @@ These selectors will scan file signatures in the HTTP body. You can select from - BitTorrent file (`.torrent`) +**Unscannable** + +- Password-protected Microsoft Office document +- Password-protected PDF +- Password-protected ZIP archive +- Unscannable ZIP archive +
| UI name | API example | From 9812565d7cb081c94b3342ccb9e833a00939db04 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 19 Feb 2025 14:41:44 -0600 Subject: [PATCH 3/3] Add link --- src/content/release-notes/gateway.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/release-notes/gateway.yaml b/src/content/release-notes/gateway.yaml index 3fd26b5c64a037..75d87abde31e79 100644 --- a/src/content/release-notes/gateway.yaml +++ b/src/content/release-notes/gateway.yaml @@ -8,7 +8,7 @@ entries: - publish_date: "2025-02-13" title: Unscannable files for Download and Upload File Types selectors description: |- - Gateway and DLP users can now match unscannable files with the Download and Upload File Types traffic selectors for HTTP policies. This update allows users to block files that are password-protected, compressed, or otherwise unscannable. + Gateway and DLP users can now match [unscannable files](/cloudflare-one/policies/gateway/http-policies/#download-and-upload-file-types) with the Download and Upload File Types traffic selectors for HTTP policies. This update allows users to block files that are password-protected, compressed, or otherwise unscannable. - publish_date: "2025-02-12" title: Upload/Download File Size selectors for HTTP policies description: |-