shiichan

Threat Intel Lists now work with Cloudflare's Unified Routing!

Hi, it's me! I found a networking security update today, so let me walk you through it!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to the Cloudflare Changelog, the Threat Intel Lists feature of Cloudflare Advanced Network Firewall is now supported for accounts using Unified Routing mode.

Threat Intel Lists let you inspect and block traffic based on threat intelligence data. This capability is now available across Cloudflare Network Firewall, Magic Transit, and Cloudflare WAN when they're running under Unified Routing. You'll need a Cloudflare Advanced Network Firewall subscription to use it.

Why it matters

Unified Routing is a newer (currently beta) mode for managing traffic steering across multiple network security products in one place. With new unified platforms like this, it's common for core features to be rolled out gradually after the basic routing capabilities land first.

Bringing a core feature like Threat Intel Lists into Unified Routing means accounts on the new mode don't have to give up major security capabilities to use it.

What changes

  • Accounts on Unified Routing can now inspect and block traffic based on threat intelligence data
  • Teams combining Magic Transit, Cloudflare WAN, and Network Firewall can apply security policy more consistently across products

Dive Deep

This is still within the beta scope of Unified Routing, which has a few other limitations right now. Cloudflare says Rate Limiting and Managed Rulesets support is planned next, so Threat Intel Lists looks like one step in a broader roadmap of porting core features over to Unified Routing.

For the current beta limitations, Cloudflare points to its Traffic steering beta limitations documentation, so it's worth checking that if you're evaluating Unified Routing for your setup.

Wrap-up

  • Advanced Network Firewall's Threat Intel Lists now supports Unified Routing mode
  • Applies to Cloudflare Network Firewall, Magic Transit, and Cloudflare WAN
  • Requires a Cloudflare Advanced Network Firewall subscription
  • Rate Limiting and Managed Rulesets support are planned next

This one's for infrastructure and security folks running Magic Transit or WAN who want consistent threat protection across their setup!