f
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Review of WAF custom rules via API
Gotcha is just that for instance joomla is disabled on our managed ruleset , but I see joomla sqli enabled and other joomla related vulns for some reason
10 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Review of WAF custom rules via API
Wondering if u know how to retrieve cloudflare waf managed ruleset and also the owasp mod security
10 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Review of WAF custom rules via API
Hi Erisa, wondering if you could help me retrieve some other waf configs from the api :blob_sweat:
10 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Cipher Configs Subdomain
without ACM
20 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Cipher Configs Subdomain
Hey Chaika, i was given permissions to apply the configs at the zone level since we do not have ACM and but this also gives us the same message: Advance Certificate Manager is Required to Set custom ciphers. We are just trying to upgrade to cloudflare's modern security level cipher suites
["ECDHE-ECDSA-AES128-GCM-SHA256", "ECDHE-ECDSA-CHACHA20-POLY1305", "ECDHE-RSA-AES128-GCM-SHA256", "ECDHE-RSA-CHACHA20-POLY1305", "ECDHE-ECDSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384"]
is zone changes of this sort still possible?
20 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Review of WAF custom rules via API
thanks Erisa!
10 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Cipher Configs Subdomain
i see thanks Chaika, still trying to learn everything cloudflare has to offer
20 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Cipher Configs Subdomain
I have to have the ACM ? i cant just apply the new ciphers on this endpoint for www1 hostname?/{zone_id}/hostnames/settings/{setting_id}/{hostname}
20 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Review of WAF custom rules via API
10 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Review of WAF custom rules via API
so then i would need to hit this endpoint curl https://api.cloudflare.com/client/v4/zones/{zone_id}/rulesets/{ruleset_id}
10 replies
CDCloudflare Developers
•Created by f on 3/1/2024 in #general-help
Cipher Configs Subdomain
thanks Chaika we do have an ACM not very familiar with how it works tho so i will ook into it
20 replies