Require WARP
Feature availability
| Operating Systems | WARP mode required | Zero Trust plans |
|---|---|---|
| All systems | WARP with Gateway | All plans |
Cloudflare Zero Trust enables you to restrict access to your applications to devices running the Cloudflare WARP client. This allows you to flexibly ensure that a user’s traffic is secure and encrypted before allowing access to a resource protected behind Cloudflare Zero Trust.
1. Enable the WARP check
- In Zero Trust, go to Settings > Network.
- Ensure that Proxy is enabled.
- Next, go to Settings > WARP Client.
- Scroll down to WARP client checks and select Add new.
- Select WARP.
You are now ready to start requiring WARP for your Access applications.
2. Add the check to an Access policy
-
In Zero Trust, go to Access > Applications.
-
Locate the application for which you want to require WARP.
-
Select Edit.
-
To have an existing policy require WARP, select Edit for that specific policy. Then, add an Include or Require rule which uses the WARP selector.
-
Select Save rule.
Before granting access to the application, your policy will now check that the device is running the WARP client.