导航|地址|刷新
Deploy a WAF managed ruleset in the dash…

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/waf/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

WAF

/

Overview

Get started

Concepts

Traffic detections

Overview

Attack score

Leaked credentials

Overview

Get started

Common API calls

Terraform examples

Example mitigation rules

Malicious uploads

Overview

Get started

Example rules

Common API calls

Terraform examples

AI Security for Apps

Overview

Get started

PII detection

Unsafe and custom topic detection

Prompt injection detection

Token counting

Example mitigation rules

Log mode vs production mode

Available fields

Bot score ↗

Threat intelligence

Overview

Get started

Example rules

Available fields

Custom rules

Overview

Create in the dashboard

Create via API

Create using Terraform ↗

Configure a rule with the Skip action

Overview

API examples

Skip options

Common use cases

Allow traffic from IP addresses in allowlist only

Allow traffic from search engine bots

Allow traffic from specific countries only

Block Microsoft Exchange Autodiscover requests

Block requests by attack score

Block traffic by geographical location

Block traffic from specific countries

Build a sequence rule within custom rules

Challenge bad bots

Configure token authentication

Exempt partners from Hotlink Protection

Issue challenge for admin user in JWT claim based on attack score

Require a specific cookie

Require known IP addresses in site admin area

Require specific HTTP headers

Require specific HTTP ports

Stop R-U-Dead-Yet? (R.U.D.Y.) attacks

Update custom rules for customers or partners

Custom rulesets

Rate limiting rules

Overview

Request rate calculation

Create in the dashboard

Create via API

Create using Terraform ↗

Find appropriate rate limit

Rate limiting parameters

Rule examples

Best practices

Troubleshooting

Managed rules

Overview

Deploy in the dashboard

Deploy via API

Deploy using Terraform ↗

Troubleshooting

Create exceptions

Overview

Add an exception in the dashboard

Add an exception via API

Log the payload of matched rules

Overview

Configure in the dashboard

View the payload content in the dashboard

Configure via API

Store decrypted matched payloads in logs

Command-line operations

Overview

Generate a key pair

Decrypt the payload content

Check for exposed credentialsDeprecated

Overview

How it works

Configure via API

Configure using Terraform

Test your configuration

Monitor exposed credentials events

Upgrade to leaked credentials detection

Rulesets reference

Cloudflare Managed Ruleset

Cloudflare OWASP Core Ruleset

Overview

Concepts

Evaluation example

Configure in the dashboard

Configure via API

Configure in Terraform ↗

Cloudflare Exposed Credentials Check Managed RulesetDeprecated

Cloudflare Sensitive Data Detection

Additional tools

Lists

Overview

Custom lists

Bulk Redirect Lists ↗

Managed Lists

Create in the dashboard

Use lists in expressions

Lists API

Overview

JSON object

Endpoints

IP Access rules

Overview

Create a rule

Parameters

Actions

Scrape Shield

Overview

Email Address Obfuscation

Hotlink Protection

User Agent Blocking

Zone Lockdown

Browser Integrity Check

Enable security.txt ↗

Privacy Pass

Replace insecure JS libraries

Security Level

Validation checks

Account-level configuration

Overview

Custom rulesets

Overview

Use the dashboard

Use the API

Use Terraform ↗

Rate limiting rulesets

Overview

Create in the dashboard

Create via API

Create using Terraform ↗

Managed rulesets

Overview

Deploy in the dashboard

Deploy via API

Deploy using Terraform ↗

Create exceptions ↗

Analytics

Security Analytics

Security Events

Security features interoperability

Reference

Alerts

Phases

Legacy features

WAF managed rules (previous version)

Overview

Troubleshooting

WAF managed rules upgrade

Rate Limiting (previous version)

Overview

Troubleshooting

Rate limiting upgrade

Firewall rules ↗

Firewall rules upgrade

Troubleshooting

Bing's Site Scan blocked by a managed rule

Fake bot detection blocking legitimate requests

Issues sharing to Facebook

SameSite cookie interaction with Cloudflare

Rule phase interactions

FAQ

Glossary

Changelog

Overview

Changelog

Scheduled changes

Historical (2024)

Historical (2023)

Historical (2022)

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

WAF llms.txt ↗

WAF llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/WAF

/Managed rules

/Deploy in the dashboard

Deploy a WAF managed ruleset in the dashboard

Last updated Apr 16, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewDeploy a managed rulesetConfigure a managed ruleset Configure all the rules in a managed ruleset Configure rules of a managed ruleset with specific tags Configure individual rules of a managed ruleset Browse the rules of a managed ruleset Delete a managed ruleset deployment rule or an exception

The instructions in this page provide general guidance for deploying and configuring a managed ruleset for a zone.

For more specific instructions, refer to the following pages:

Deploy the Cloudflare Managed Ruleset

Deploy the Cloudflare OWASP Core Ruleset

Deploy the Cloudflare Sensitive Data Detection ruleset

Tip

To deploy a managed ruleset for several Enterprise domains in your account, refer to Deploy a WAF managed ruleset in the dashboard (account).

Deploy a managed ruleset

To deploy a managed ruleset for a zone:

In the Cloudflare dashboard, go to the Security Settings page.
Go to Settings ↗

(Optional) Filter by Web application exploits.

Turn on the managed ruleset(s) you want to deploy:

Cloudflare managed ruleset - Deploys the Cloudflare Managed Ruleset.

OWASP Core - Deploys the Cloudflare OWASP Core Ruleset.

Sensitive data detection - Deploys the Cloudflare Sensitive Data Detection managed ruleset.

Review the deployment settings. Edit the scope, if necessary, to apply the ruleset to a subset of the incoming requests, or configure any custom settings (also known as overrides).

Select Save.

Log in to the Cloudflare dashboard ↗, and select your account and domain.

Go to Security > WAF > Managed rules tab.

Under Managed Rulesets, select Deploy next to a managed ruleset.
WAF. There are two managed rulesets already deployed, and one managed ruleset available for deployment." loading="lazy" decoding="async" width="1033" height="647">

This operation deploys the managed ruleset for the current zone, creating a new rule with the Execute action.

To temporarily turn off a managed ruleset without deleting its deployment configuration, use the toggle next to the rule that deploys the managed ruleset.

Configure a managed ruleset

Configure a managed ruleset to:

Specify a custom filter expression to apply the rules in the ruleset to a subset of incoming requests.

Configure (or override) specific settings for one or more rules (for example, configure a rule with an action different from the default action configured by Cloudflare), or turn off those rules.

To skip one or more rules — or even entire managed rulesets — for specific incoming requests, add an exception.

Note

Some managed rulesets may not allow custom configuration, depending on your Cloudflare plan.

Configure all the rules in a managed ruleset

To configure (or override) settings for all the rules in a managed ruleset:

In the Cloudflare dashboard, go to the Security rules page.
Go to Security rules ↗

(Optional) Filter by Managed rules.

Search for the managed ruleset you want to configure. Look for a rule with an Execute action.

Select the rule name (containing the name of the managed ruleset) to open the deployment configuration page.

(Optional) To execute the managed ruleset for a subset of incoming requests, select Edit scope and configure the expression that will determine the scope of the current rule deploying the managed ruleset.

In the ruleset configuration section, define settings for all the rules in the ruleset by setting one or more fields using the drop-down lists.

For example, select the action to perform for all the rules in the ruleset.

Select Save.

Log in to the Cloudflare dashboard ↗, and select your account and domain.

Go to Security > WAF > Managed rules tab.

Next to the Execute rule deploying the managed ruleset you want to configure, select the managed ruleset name.
If you have not deployed the managed ruleset yet, select the managed ruleset name under Managed Rulesets.

(Optional) To execute the managed ruleset for a subset of incoming requests, select Edit scope and configure the expression that will determine the scope of the current rule deploying the managed ruleset.

Under Ruleset configuration, define settings for all the rules in the ruleset using the drop-down lists.

For example, select the action to perform for all the rules in the ruleset.

If you have not deployed the managed ruleset yet:

Select Deploy to deploy the ruleset immediately.

Select Save as Draft to save your deployment settings for later.

If you are editing a managed ruleset you already deployed, select Save.

Configure rules of a managed ruleset with specific tags

To configure (or override) settings of rules tagged with specific tags:

In the Cloudflare dashboard, go to the Security rules page.
Go to Security rules ↗

(Optional) Filter by Managed rules.

Search for the managed ruleset you want to configure/browse. Look for a rule with an Execute action.

Select the rule name (containing the name of the managed ruleset), and then select Browse rules.

Select one or more tags under the search input to filter the rules with those tags, and then select the checkbox in the top left corner of the table to select all the rules shown in the current page.
If not all the rules are displayed in the current page, extend your selection to all rules with the selected tags across all pages by selecting Select all <NUMBER> rules.

Update one or more settings for the selected rules using the buttons displayed in the top right corner of the table (for example, Set status).

Select Next.

A dialog appears asking you if any new rules with the selected tags should be configured with the field values you selected.

Select Include new rules if you want to apply your configurations to any new rules with the select tags.

Select Only selected rules to apply your configurations to the selected rules only.

Select Save.

Log in to the Cloudflare dashboard ↗, and select your account and domain.

Go to Security > WAF > Managed rules tab.

If you have already deployed the managed ruleset you want to configure, select the ruleset name in the list of deployed managed rulesets. Alternatively, select the three dots > Edit next to the Execute rule deploying the managed ruleset.

If you have not deployed the managed ruleset, select the ruleset name under Managed Rulesets.

Select Browse rules.

Select one or more tags under the search input to filter the rules with those tags, and then select the checkbox in the top left corner of the table to select all the rules shown in the current page.
If not all the rules are displayed in the current page, extend your selection to all rules with the selected tags across all pages by selecting Select all <NUMBER> rules.

Update one or more settings for the selected rules using the buttons displayed in the top right corner of the table (for example, Set status).

Select Next.

A dialog appears asking you if any new rules with the selected tags should be configured with the field values you selected.

Select Include new rules if you want to apply your configurations to any new rules with the select tags.

Select Only selected rules to apply your configurations to the selected rules only.

Select Save.

Configure individual rules of a managed ruleset

To configure (or override) settings of individual rules of a managed ruleset:

In the Cloudflare dashboard, go to the Security rules page.
Go to Security rules ↗

(Optional) Filter by Managed rules.

Search for the managed ruleset you want to configure/browse. Look for a rule with an Execute action.

Select the rule name (containing the name of the managed ruleset), and then select Browse rules.

Search for rules using the available filters.

In the results list, change the values for each rule as desired, using the displayed drop-down lists and toggles. For example, change the status of a rule using the Status toggle next to the rule.

To configure multiple rules with the same value, select the checkboxes for all the rules you want to configure. If not all the rules are displayed in the current page, you can extend your selection to all rules across all pages by selecting
…(内容过长已截断)

------
导航页打开网址