Deploy a managed ruleset in the dashboard for a zone
You can deploy and configure managed rulesets for a zone in Security > WAF > Managed rules.
To deploy a managed ruleset for several Enterprise domains in your account, refer to Deploy a managed ruleset in the dashboard for an account.
Deploy a managed ruleset
To deploy a managed ruleset with the default configuration:
Log in to the Cloudflare dashboard, and select your account and domain.
Go to Security > WAF > Managed rules.
Under Managed Rulesets, select Deploy next to a managed ruleset.
This operation will deploy the managed ruleset for the current zone, creating a new rule with the Execute action.
Turn on or off a managed ruleset
Select the Enabled toggle next to a managed ruleset to turn it on or off.
Configure a managed ruleset
Configure a managed ruleset to:
- Specify a custom filter expression to apply the rules in the ruleset to a subset of incoming requests.
- Define specific field values for one or more rules (for example, configure a rule with an action different from the action configured by Cloudflare), or turn off those rules.
To skip one or more rules — or even entire WAF managed rulesets — for specific incoming requests, add an exception.
Configure field values for all the rules
To configure rule field values for all the rules in a managed ruleset:
Log in to the Cloudflare dashboard, and select your account and domain.
Go to Security > WAF > Managed rules.
Next to the Execute rule deploying the managed ruleset you want to configure, select the managed ruleset name.
If you have not deployed the managed ruleset yet, select the managed ruleset name under Managed Rulesets.(Optional) To execute the managed ruleset for a subset of incoming requests, select Edit scope and configure the expression that will determine the scope of the current rule deploying the managed ruleset.
In the ruleset configuration section, define settings for all the rules in the ruleset by setting one or more fields using the drop-down lists.
For example, select the action to perform for all the rules in the ruleset from the Ruleset action drop-down list.
If you are editing a deployed managed ruleset, select Save. If you have not deployed the managed ruleset yet, select Deploy to deploy the ruleset immediately, or Save as Draft to save your deployment settings for later.
Configure rules in bulk in a managed ruleset
Log in to the Cloudflare dashboard, and select your account and domain.
Go to Security > WAF > Managed rules.
If you have already deployed the managed ruleset you want to configure, select the managed ruleset name in the list of deployed managed rulesets. Alternatively, select the three dots > Edit next to the Execute rule deploying the managed ruleset.
If you have not deployed the managed ruleset, select the ruleset name under Managed Rulesets.
Select Browse rules.
Search for rules using the available filters. You can search for tags.
In the results list, select the checkboxes for all the rules you want to configure.
Alternatively, select a tag name under the search input to filter the rules with that tag, and then select the checkboxes for the rules you want to configure. To extend your selection to all rules with the tag across all pages, select Select all <NUMBER> rules.
Update one or more fields for the selected rules using the buttons displayed in the top right corner of the table.
Select Next.
If you selected a tag, a dialog appears asking you if any new rules with the selected tag should be configured with the field values you selected.
- Select Do not apply to new rules to apply your configurations to the selected rules only.
- Select Apply to new rules if you want to apply your configurations to any new rules with the select tag.
Select Save.
Configure a single rule in a managed ruleset
Log in to the Cloudflare dashboard, and select your account and domain.
Go to Security > WAF > Managed rules.
If you have already deployed the managed ruleset you want to configure, select the managed ruleset name in the list of deployed managed rulesets. Alternatively, select the three dots > Edit next to the Execute rule deploying the managed ruleset.
If you have not deployed the managed ruleset, select the ruleset name under Managed Rulesets.
Select Browse rules.
Search for a rule using the available filters. You can search for tags.
Find the rule you want to configure in the results list.
In the result line for the rule you want to change, select the desired value for a field in the displayed drop-down lists. For example, select the rule action in the Action dropdown. You can also change the status of a rule using the Status toggle next to the rule.
Select Next, and then select Save.
Browse the rules of a managed ruleset
You can browse the available rules in a managed ruleset and search for individual rules or tags.
Log in to the Cloudflare dashboard, and select your account and domain.
Go to Security > WAF > Managed rules.
If you have already deployed the managed ruleset you want to configure, select the managed ruleset name in the list of deployed managed rulesets. Alternatively, select the three dots > Edit next to the Execute rule deploying the managed ruleset.
If you have not deployed the managed ruleset, select the ruleset name under Managed Rulesets.
Select Browse rules.
Delete a managed ruleset deployment rule or an exception
- Log in to the Cloudflare dashboard and select your account and domain.
- Go to Security > WAF > Managed rules.
- Next to the rule or exception (skip rule) you want to delete, select the three dots > Delete and confirm the operation.