导航|地址|刷新
Deploy a WAF managed ruleset in the dash…

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/waf/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

WAF

/

Overview

Get started

Concepts

Traffic detections

Overview

Attack score

Leaked credentials

Overview

Get started

Common API calls

Terraform examples

Example mitigation rules

Malicious uploads

Overview

Get started

Example rules

Common API calls

Terraform examples

AI Security for Apps

Overview

Get started

PII detection

Unsafe and custom topic detection

Prompt injection detection

Token counting

Example mitigation rules

Log mode vs production mode

Available fields

Bot score ↗

Threat intelligence

Overview

Get started

Example rules

Available fields

Custom rules

Overview

Create in the dashboard

Create via API

Create using Terraform ↗

Configure a rule with the Skip action

Overview

API examples

Skip options

Common use cases

Allow traffic from IP addresses in allowlist only

Allow traffic from search engine bots

Allow traffic from specific countries only

Block Microsoft Exchange Autodiscover requests

Block requests by attack score

Block traffic by geographical location

Block traffic from specific countries

Build a sequence rule within custom rules

Challenge bad bots

Configure token authentication

Exempt partners from Hotlink Protection

Issue challenge for admin user in JWT claim based on attack score

Require a specific cookie

Require known IP addresses in site admin area

Require specific HTTP headers

Require specific HTTP ports

Stop R-U-Dead-Yet? (R.U.D.Y.) attacks

Update custom rules for customers or partners

Custom rulesets

Rate limiting rules

Overview

Request rate calculation

Create in the dashboard

Create via API

Create using Terraform ↗

Find appropriate rate limit

Rate limiting parameters

Rule examples

Best practices

Troubleshooting

Managed rules

Overview

Deploy in the dashboard

Deploy via API

Deploy using Terraform ↗

Troubleshooting

Create exceptions

Overview

Add an exception in the dashboard

Add an exception via API

Log the payload of matched rules

Overview

Configure in the dashboard

View the payload content in the dashboard

Configure via API

Store decrypted matched payloads in logs

Command-line operations

Overview

Generate a key pair

Decrypt the payload content

Check for exposed credentialsDeprecated

Overview

How it works

Configure via API

Configure using Terraform

Test your configuration

Monitor exposed credentials events

Upgrade to leaked credentials detection

Rulesets reference

Cloudflare Managed Ruleset

Cloudflare OWASP Core Ruleset

Overview

Concepts

Evaluation example

Configure in the dashboard

Configure via API

Configure in Terraform ↗

Cloudflare Exposed Credentials Check Managed RulesetDeprecated

Cloudflare Sensitive Data Detection

Additional tools

Lists

Overview

Custom lists

Bulk Redirect Lists ↗

Managed Lists

Create in the dashboard

Use lists in expressions

Lists API

Overview

JSON object

Endpoints

IP Access rules

Overview

Create a rule

Parameters

Actions

Scrape Shield

Overview

Email Address Obfuscation

Hotlink Protection

User Agent Blocking

Zone Lockdown

Browser Integrity Check

Enable security.txt ↗

Privacy Pass

Replace insecure JS libraries

Security Level

Validation checks

Account-level configuration

Overview

Custom rulesets

Overview

Use the dashboard

Use the API

Use Terraform ↗

Rate limiting rulesets

Overview

Create in the dashboard

Create via API

Create using Terraform ↗

Managed rulesets

Overview

Deploy in the dashboard

Deploy via API

Deploy using Terraform ↗

Create exceptions ↗

Analytics

Security Analytics

Security Events

Security features interoperability

Reference

Alerts

Phases

Legacy features

WAF managed rules (previous version)

Overview

Troubleshooting

WAF managed rules upgrade

Rate Limiting (previous version)

Overview

Troubleshooting

Rate limiting upgrade

Firewall rules ↗

Firewall rules upgrade

Troubleshooting

Bing's Site Scan blocked by a managed rule

Fake bot detection blocking legitimate requests

Issues sharing to Facebook

SameSite cookie interaction with Cloudflare

Rule phase interactions

FAQ

Glossary

Changelog

Overview

Changelog

Scheduled changes

Historical (2024)

Historical (2023)

Historical (2022)

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

WAF llms.txt ↗

WAF llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/WAF

/…
Account-level configuration

/Managed rulesets

/Deploy in the dashboard

Deploy a WAF managed ruleset in the dashboard (account)

Last updated Apr 16, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewDeploy a managed rulesetTurn on or off a managed rulesetConfigure a managed ruleset Configure field values for all the rules Configure rules in bulk in a managed ruleset Configure a single rule in a managed ruleset Browse the rules of a managed ruleset Delete a managed ruleset deployment rule or an exception

Note

This feature requires an Enterprise plan.

To deploy a managed ruleset for a single zone, refer to Deploy a WAF managed ruleset in the dashboard.

Deploy a managed ruleset

In the Cloudflare dashboard, go to the WAF page.
Go to WAF ↗

Go to the Managed rulesets tab.

Select Deploy > Deploy managed ruleset.

Next to the managed ruleset you want to deploy, select Select ruleset.

Give a name to the rule deploying the ruleset in Execution name.

(Optional) To execute the managed ruleset for a subset of incoming requests, select Edit scope and configure the expression that will determine the scope of the current rule deploying the managed ruleset.

Caution

Deployed rulesets will only apply to incoming traffic of Enterprise domains on your account. The Expression Builder will automatically include this filter. If you define a custom expression using the Expression Editor, use parentheses to enclose any custom conditions and end your expression with and cf.zone.plan eq "ENT" so that the rule only applies to domains on an Enterprise plan.

(Optional) You can customize the behavior of the managed ruleset in the following ways:

Configure the entire ruleset (affects all the rules)

Configure several rules or rules with specific tags

Configure a single rule

To deploy the managed ruleset immediately, select Deploy. If you are not ready to deploy, select Save as Draft.

The Deployed managed rulesets list will show an Execute rule for the managed ruleset you deployed.

Turn on or off a managed ruleset

Select the Enabled toggle next to a deployed managed ruleset to turn it on or off.

Configure a managed ruleset

Configure a managed ruleset to define specific field values for one or more rules (for example, configure a rule with an action different from the action configured by Cloudflare). You can also turn off specific rules.

To skip one or more rules — or even entire WAF managed rulesets — for specific incoming requests, add an exception. Exceptions, also called skip rules, are shown as Skip rules in the Deployed managed rulesets list.

Note

Some managed rulesets may not allow custom configuration, depending on your Cloudflare plan.

Configure field values for all the rules

To configure an entire managed ruleset:

In the Cloudflare dashboard, go to the WAF page.
Go to WAF ↗

Go to the Managed rulesets tab.

Select the rule description of the Execute rule that deploys the managed ruleset you want to configure. Alternatively, select the three dots > Edit.

If you have not deployed the managed ruleset yet, do the following:

Select Deploy > Deploy managed ruleset.

Next to the managed ruleset you want to deploy and configure, select Select ruleset.

In the ruleset configuration section, set one or more rule fields from the available values in the drop-down lists. The exact options vary according to the managed ruleset you are configuring.

For example, select the action to perform for all the rules in the ruleset from the Ruleset action drop-down list.

If you are editing a deployed managed ruleset, select Save. If you have not deployed the managed ruleset yet, select Deploy to deploy the ruleset immediately, or Save as Draft to save your deployment settings for later.

Configure rules in bulk in a managed ruleset

In the Cloudflare dashboard, go to the WAF page.
Go to WAF ↗

Go to the Managed rulesets tab.

If you have already deployed the managed ruleset you want to configure, find the rule deploying that managed ruleset and select the rule description. Alternatively, select the three dots > Edit next to an Execute rule deploying the managed ruleset.

If you have not deployed the managed ruleset:

Select Deploy > Deploy managed ruleset.

Next to the managed ruleset, select Select ruleset.

Select Browse rules.

Select one or more tags under the search input to filter the rules with those tags, and then select the checkbox in the top left corner of the table to select all the rules shown in the current page.
If not all the rules are displayed in the current page, extend your selection to all rules with the selected tags across all pages by selecting Select all <NUMBER> rules.

Update one or more settings for the selected rules using the buttons displayed in the top right corner of the table (for example, Set status).

Select Next.

A dialog appears asking you if any new rules with the selected tags should be configured with the field values you selected.

Select Include new rules if you want to apply your configurations to any new rules with the select tags.

Select Only selected rules to apply your configurations to the selected rules only.

Select Save.

Configure a single rule in a managed ruleset

In the Cloudflare dashboard, go to the WAF page.
Go to WAF ↗

Go to the Managed rulesets tab.

If you have already deployed the managed ruleset you want to configure, find the rule deploying that managed ruleset and select the rule description. Alternatively, select the three dots > Edit next to an Execute rule deploying the managed ruleset.

If you have not deployed the managed ruleset:

Select Deploy > Deploy managed ruleset.

Next to the managed ruleset, select Select ruleset.

Select Browse rules.

Search for rules using the available filters.

In the results list, change the values for each rule as desired, using the displayed drop-down lists and toggles. For example, change the status of a rule using the Status toggle next to the rule.

To configure multiple rules with the same value, select the checkboxes for all the rules you want to configure. If not all the rules are displayed in the current page, you can extend your selection to all rules across all pages by selecting Select all <NUMBER> rules. Then, use the buttons displayed in the top right corner of the table — for example, Set status — to update one or more fields for the selected rules.

Select Next, and then select Save.

Browse the rules of a managed ruleset

You can browse the available rules in a managed ruleset and search for individual rules or tags.

In the Cloudflare dashboard, go to the WAF page.
Go to WAF ↗

Go to the Managed rulesets tab.

Select the rule description of the Execute rule that deploys the managed ruleset you want to configure. Alternatively, select the three dots > Edit.

If you have not deployed the managed ruleset yet, do the following:

Select Deploy > Deploy managed ruleset.

Next to the managed ruleset you want to browse, select Select ruleset.

Select Browse rules.

Delete a managed ruleset deployment rule or an exception

In the Cloudflare dashboard, go to the WAF page.
Go to WAF ↗

Go to the Managed rulesets tab.

Under Deployed managed rulesets and next to the rule you want to delete, select the three dots > Delete and confirm the operation.

PreviousOverviewNextDeploy via API

Was this helpful?

YesNo

Edit pageReport issue

On this page

Overview

Deploy a managed ruleset

Turn on or off a managed ruleset

Configure a managed ruleset

Configure field values for all the rules

Configure rules in bulk in a managed ruleset

Configure a single rule in a managed ruleset

Browse the rules of a managed ruleset

Delete a managed ruleset deployment rule or an exception

Edit pageReport issue

…(内容过长已截断)

------
导航页打开网址