Firewall

The Firewall device posture attribute ensures that a firewall is running on a device.

​​ Prerequisites

• Cloudflare WARP client is deployed on the device. For a list of supported modes and operating systems, refer to WARP client checks.

​​ Enable the firewall check

1. In Zero Trust Open external link , go to Settings > WARP Client.
2. Scroll down to WARP client checks and select Add new.
3. Select Firewall.
4. Enter a descriptive name for the check.
5. Select your operating system.
6. Turn on Enable firewall check.
7. Select Save.

Next, go to Logs > Posture and verify that the firewall check is returning the expected results.

​​ How WARP checks the firewall status

Operating systems determine firewall configuration in various ways. Follow the steps below to understand how the WARP client determines if the firewall is enabled.

​​ On macOS

macOS has two firewalls: an application-based firewall and a port-based firewall. The WARP client will report a firewall is enabled if either firewall is running.

​​ Application-based firewall

1. Open System Settings and go to Network.
2. Verify that Firewall is Active.

​​ Port-based firewall

1. Open Terminal and run:

   $ sudo /sbin/pfctl -s info
   

2. Verify that Status is Enabled.

​​ On Windows

1. Open PowerShell and run:

   PS C:\Users\JohnDoe> Get-NetFirewallProfile -PolicyStore ActiveStore -Name Public
   

2. Verify that Enabled is True.