Cf.threat_score being deprecated

General Rules
1

What is the name of the domain?

What is the issue you’re encountering

cf.threat_score being deprecated

What steps have you taken to resolve the issue?

Hello everyone,

We are currently reviewing our WAF rules in Cloudflare and based on the documentation here (Fields reference · Cloudflare Ruleset Engine docs),
the field cf.threat_score will be deprecated on 2024-09-30.
What can we use instead of this field, so that our rules will not be impacted?

Best regards

1 Like
2

Hi @gabriela.corsatea,

Thank you for your question.

I’m getting in touch with our dedicated team to see if there is an alternative.

4

Hi @gabriela.corsatea and thanks for flagging this! Since February of 2024, we have silently released a new security system that automatically combines the IP threat score with a traffic threshold and a botnet tracking system. This new system supersedes and replaces the existing Security Level logic (including the cf.threat_score) and is available to all customers on all plans, and also eliminates the need for customers to set a sensitivity level.

You may choose to review and edit or delete these existing rules. Rest assured, the automatic protections we have implemented will ensure your security remains uncompromised.

4 Likes
5

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.