As many have posted, we are in the testing phase for Cloudflare Zero Trust. Specifically, we are using a free account and starting with basic DNS filtering (i.e. OpenDNS, DNSFilter, etc.).
For testing, I am simply using the pornography category as an example. I wanted to see the differences in page loads (blocking) to a popular porno site (initials PH) with our current DNS settings (QUAD9 - no block). I then changed our gateway equipment to 1.1.1.3 to test if PH would be blocked (successfully blocked).
From that point I added our static WAN IP to the location area in the Zero Trust Dashboard. I followed the tutorial to setup the policy and changed the DNS in out gateway equipment to those provided in the dashboard. This location is set as the default and EDNS is not checked. [Setup Instructions]
It has been 48 hours and so far no joy.
- I am not getting traffic in the data analytics area (i.e. it does not appear that Clouflare is seeing the traffic).
- Due to the above, obviously no DNS filtering is working.
- The Zero Trust help page [Zero Trust Help Page] states we are Not Protected.
As another test, I added another location using the static IP of our SAAS VPN (and changing the DNS in their system). Within minutes I am seeing data analytics for that location.
I am looking for any thoughts or ideas on why Cloudflare is not seeing the data from our IP/Gateway location? The static is from Comcast/Xfinity.
Any thoughts or ideas would be appreciated.
Thanks in advance.