-
Notifications
You must be signed in to change notification settings - Fork 6.5k
[CF1] CWI TLS decryption note #21789
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Howdy and thanks for contributing to our repo. The Cloudflare team reviews new, external PRs within two (2) weeks. If it's been two weeks or longer without any movement, please tag the PR Assignees in a comment. We review internal PRs within 1 week. If it's something urgent or has been sitting without a comment, start a thread in the Developer Docs space internally. PR Change SummaryAdded a note regarding TLS decryption requirements for Clientless Web Isolation traffic in the documentation.
Modified Files
How can I customize these reviews?Check out the Hyperlint AI Reviewer docs for more information on how to customize the review. If you just want to ignore it on this PR, you can add the Note specifically for link checks, we only check the first 30 links in a file and we cache the results for several hours (for instance, if you just added a page, you might experience this). Our recommendation is to add |
Preview URL: https://1de8fd46.preview.developers.cloudflare.com Files with changes (up to 15) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added a note to clarify functionality
@@ -54,6 +54,12 @@ If [TLS decryption](/cloudflare-one/policies/gateway/http-policies/tls-decryptio | |||
| -------- | -------- | ------------ | -------------- | | |||
| Domain | is | `mysite.com` | Do Not Inspect | | |||
|
|||
:::note | |||
|
|||
TLS decryption is not required to apply HTTP policies to Clientless Web Isolation traffic. However, enabling TLS decryption is necessary if you want to add [Data Loss Prevention (DLP)](/cloudflare-one/policies/data-loss-prevention/) configurations. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I realized that using DLP wording in my comment on the ticket was probably confusing. I sometimes refer to the isolation settings (e.g. disable copy paste, disable download,etc) as DLP configurations but this does NOT refer to our Data Loss Prevention platform, which actually doesn't yet work with RBI but is something we'd like to do in H2.
HTTP Policies cannot be enforced in Clientless without TLS decryption being turned on.
...ontent/docs/cloudflare-one/policies/browser-isolation/setup/clientless-browser-isolation.mdx
Outdated
Show resolved
Hide resolved
…up/clientless-browser-isolation.mdx
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
Summary
PCX-15362
Screenshots (optional)
Documentation checklist