Firewall

The Firewall device posture attribute ensures that a firewall is running on a device.

• Cloudflare One Client is deployed on the device. For a list of supported modes and operating systems, refer to Cloudflare One Client Checks.

1. In the Cloudflare dashboard ↗, go to Zero Trust > Reusable components > Posture checks.

2. Go to Cloudflare One Client checks and select Add a check.

3. Select Firewall.

4. Enter a descriptive name for the check.

5. Select your operating system.

6. Configure Enable firewall check based on your desired security policy:

   • Enabled: (Recommended) The posture check passes only if the firewall is running.
   • Disabled: The posture check passes only if the firewall is turned off.

7. Select Save.

Next, go to Insights > Logs > Posture logs and verify that the firewall check is returning the expected results.

Operating systems determine firewall configuration in various ways. Follow the steps below to understand how the Cloudflare One Client determines if the firewall is enabled.

macOS has two firewalls: an application-based firewall and a port-based firewall. The Cloudflare One Client will report a firewall is enabled if either firewall is running.

1. Open System Settings and go to Network.
2. Verify that Firewall is Active.

1. Open Terminal and run:

   sudo /sbin/pfctl -s info

2. Verify that Status is Enabled.

1. Open PowerShell and run:

   Get-NetFirewallProfile -PolicyStore ActiveStore -Name Public

2. Verify that Enabled is True.