- Home
- Firewall Software
- Cloudflare Magic Firewall
On the recordRead 11 Oct 202616 facts
Cloudflare Magic Firewall
Cloudflare Magic Firewall · San Francisco, California, United States · founded 2009
Plans and prices
Cloudflare Network Firewall (formerly Magic Firewall)
Priced on request
Enterprise-only · available with Magic Transit or Cloudflare WAN · advanced features available for purchase
Read 11 Oct 2026 · developers.cloudflare.com
On the record
- Advanced features
- Advanced features available for purchase include customizable and managed threat intelligence IP lists, geoblocking, ASN filtering, on-demand packet captures, protocol validation, Secure Web Gateway filtering, and IDS.developers.cloudflare.com · read 11 Oct 2026
- Analytics
- Traffic analytics are available per rule in the dashboard and through the GraphQL API.developers.cloudflare.com · read 11 Oct 2026
- Audience and availability
- The product is marked Enterprise-only and is available with a purchase of Magic Transit or Cloudflare WAN.developers.cloudflare.com · read 11 Oct 2026
- Company security and trust
- Cloudflare provides a Trust Hub with trust and compliance information.cloudflare.com · read 11 Oct 2026
- Deployment
- It runs on Cloudflare’s global network without requiring customers to manage firewall hardware appliances.cloudflare.com · read 11 Oct 2026
- Integrations
- The standard features include integration with Cloudflare WAN, and Magic Transit includes DDoS protection.developers.cloudflare.com · read 11 Oct 2026
- Management and automation
- Firewall and network configuration can be managed from one dashboard or through a programmable API compatible with Terraform.developers.cloudflare.com · read 11 Oct 2026
- Notable limit
- Network Firewall IP lists currently support IPv4 addresses, not IPv6 addresses.developers.cloudflare.com · read 11 Oct 2026
- Purpose
- It is a firewall-as-a-service that filters unwanted traffic before it reaches office networks and cloud infrastructure.developers.cloudflare.com · read 11 Oct 2026
- Rule behavior
- Traffic is permitted by default until a rule blocks it, rules are evaluated in order, and Network Firewall rules run after Cloudflare DDoS mitigations.developers.cloudflare.com · read 11 Oct 2026
- Rule matching
- Rules can match protocol, port, IP addresses, packet length, and bit fields, and changes propagate in less than a minute.developers.cloudflare.com · read 11 Oct 2026
- Threat detection
- The IDS monitors for known threat signatures, including ransomware, data exfiltration, and network scanning.developers.cloudflare.com · read 11 Oct 2026
- Traffic coverage
- It inspects and filters Layer 3 and Layer 4 traffic across headquarters, branch offices, and virtual private clouds.cloudflare.com · read 11 Oct 2026
