# Gateway logs now cover every on-ramp!

Hey everyone, it's me, Shii-chan! Today I've got a small but genuinely handy update about Zero Trust logging.

## What was announced?

From Cloudflare's Changelog: [Network Session Logs](https://developers.cloudflare.com/logs/logpush/logpush-job/datasets/account/zero_trust_network_sessions/) for traffic proxied through Cloudflare Gateway are now generated for every on-ramp, no matter the type.

Concretely, traffic from [proxy endpoints (PAC files)](https://developers.cloudflare.com/cloudflare-one/networks/resolvers-and-proxies/proxy-endpoints/) and [Browser Isolation](https://developers.cloudflare.com/cloudflare-one/remote-browser-isolation/) egress — on-ramps that previously did not produce session logs — are now logged too.

## The story so far

Until now, even when traffic went through Gateway, some on-ramps just didn't emit session logs. Proxy endpoints and Browser Isolation egress were exactly those cases, so during audits or troubleshooting you could end up thinking "wait, where's the log for this traffic?"

## What changes

From now on, traffic coming in through any on-ramp produces session logs the same way, so those gaps get filled and your visibility goes way up. Being able to follow every path at a consistent granularity is a real win for anyone doing security operations or audits.

One heads-up: if you already consume the `zero_trust_network_sessions` dataset via [Logpush](https://developers.cloudflare.com/cloudflare-one/insights/logs/logpush/) or [Log Explorer](https://developers.cloudflare.com/log-explorer/) and use these on-ramps, you may see increased log volume. It's worth checking your destination capacity and costs just in case.

## Dive Deep

Field definitions live in the [Zero Trust Network Session Logs](https://developers.cloudflare.com/logs/logpush/logpush-job/datasets/account/zero_trust_network_sessions/) docs. When you want to analyze the traffic from those logs, take a look at [Network session analytics](https://developers.cloudflare.com/cloudflare-one/insights/analytics/network-sessions/).

## Wrap-up

- Network Session Logs for Gateway traffic are now generated for all on-ramps
- Previously excluded proxy endpoints (PAC files) and Browser Isolation egress are now logged
- If you use `zero_trust_network_sessions` via Logpush / Log Explorer, log volume may increase

This one is for operations and security folks who care about log visibility in Zero Trust!