Require Gateway
Feature availability
| Operating Systems | WARP mode required | Zero Trust plans |
|---|---|---|
| All systems | WARP with Gateway | All plans |
With Require Gateway, you can allow access to your applications only to devices enrolled in your organization’s instance of Gateway. Unlike Require WARP, which will check for any WARP instance (including the consumer version), Require Gateway will only allow requests coming from devices whose traffic is filtered by your organization’s Cloudflare Gateway configuration. This policy is best used when you want to protect company-owned assets by only allowing access to employees.
1. Enable the Gateway check
- In Zero Trust, go to Settings > WARP Client.
- Scroll down to WARP client checks and select Add new.
- Select Gateway.
- Select Save.
You are now ready to start requiring Gateway for your Access applications.
2. Add the check to an Access policy
In Zero Trust, go to Access > Applications.
Locate the application for which you want to require Gateway.
Select Edit.
To have an existing policy require Gateway, select Edit for that specific policy. Then, add an Include or Require rule which uses the Gateway selector.
Select Save rule.
Before granting access to the application, your policy will now check that the device is running the WARP client and enrolled in your Zero Trust organization.