Changelog | Gateway

Gateway - Bring your own resolver IP (BYOIP) for DNS locations

Wed, 08 Jan 2025 00:00:00 GMT

Enterprise users can now provide an IP address for a private DNS resolver to use with DNS locations. Gateway supports bringing your own IPv4 and IPv6 addresses.

Gateway - Category filtering in the network policy builder

Wed, 20 Nov 2024 00:00:00 GMT

Gateway users can now create network policies with the Content Categories and Security Risks traffic selectors. This update simplifies malicious traffic blocking and streamlines network monitoring for improved security management.

Gateway - Per-account Cloudflare root certificate

Thu, 17 Oct 2024 00:00:00 GMT

Gateway users can now generate unique root CAs for their Zero Trust account. Both generated certificate and custom certificate users must activate a root certificate to use it for inspection. Per-account certificates replace the default Cloudflare certificate, which is set to expire on 2025-02-02.

Gateway - Time-based policy duration

Thu, 10 Oct 2024 00:00:00 GMT

Gateway now offers time-based DNS policy duration. With policy duration, you can configure a duration of time for a policy to turn on or set an exact date and time to turn a policy off.

Gateway - Expanded Gateway log fields

Fri, 04 Oct 2024 00:00:00 GMT

Gateway now offers new fields in activity logs for DNS, network, and HTTP policies to provide greater insight into your users' traffic routed through Gateway.

Gateway - File sandboxing

Mon, 30 Sep 2024 00:00:00 GMT

Gateway users on Enterprise plans can create HTTP policies with file sandboxing to quarantine previously unseen files downloaded by your users and scan them for malware.

Gateway - UK NCSC indicator feed publicly available in Gateway

Tue, 30 Jul 2024 00:00:00 GMT

Gateway users on any plan can now use the PDNS threat intelligence feed provided by the UK National Cyber Security Centre (NCSC) in DNS policies.

Gateway - Gateway DNS filter non-authenticated queries

Sun, 14 Jul 2024 00:00:00 GMT

Gateway users can now select which endpoints to use for a given DNS location. Available endpoints include IPv4, IPv6, DNS over HTTPS (DoH), and DNS over TLS (DoT). Users can protect each configured endpoint by specifying allowed source networks. Additionally, for the DoH endpoint, users can filter traffic based on source networks and/or authenticate user identity tokens.

Gateway - Gateway DNS policy setting to ignore CNAME category matches

Tue, 25 Jun 2024 00:00:00 GMT

Gateway now offers the ability to selectively ignore CNAME domain categories in DNS policies via the Ignore CNAME domain categories setting in the policy builder and the ignore_cname_category_matches setting in the API.

Gateway - Gateway file type control improvements

Fri, 05 Apr 2024 00:00:00 GMT

Gateway now offers a more extensive, categorized list of files to control uploads and downloads.