Cloudflare Gateway can now inspect HTTP traffic on all ports!

Hi everyone, Shiichan here! Today I want to share a nice upgrade to Cloudflare's Zero Trust feature, Gateway.

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to Cloudflare's Changelog, Gateway's HTTP filtering can now be applied to all proxied HTTP requests. Previously, only traffic on the standard HTTP (80) and HTTPS (443) ports was inspected, and that limitation is now gone. This is available in open beta, and you can turn it on from Settings > Network > Firewall by choosing "Inspect on all ports".

The story so far

Until now, Gateway only inspected HTTP traffic going over the standard 80 and 443 ports. That meant HTTP traffic on any other port could potentially slip past inspections like A/V scanning or DLP. For organizations with apps or services that communicate over non-standard ports, that gap was a real blind spot.

What changes

With "Inspect on all ports" turned on, every proxied HTTP request gets inspected by Gateway, regardless of the port. That means these inspection features now apply across all ports:

• A/V scanning (malware detection)
• File sandboxing
• DLP (Data Loss Prevention)
• Other HTTP filtering capabilities

For organizations running apps that use non-standard ports, this closes a security gap that used to exist.

Wrap-up

• Cloudflare Gateway's HTTP filtering now covers all proxied HTTP traffic, in open beta
• Previously, only the standard 80/443 ports were inspected
• Enable it via "Inspect on all ports" under Settings > Network > Firewall
• A/V scanning, file sandboxing, DLP, and more now apply across all ports

Great news if you run security policies through Cloudflare Gateway and have been wondering about traffic on non-standard ports!