The WAF section is missing from the dashboard

What is the name of the domain?

mu.edu.ua

What is the issue you’re encountering

Hi everyone! I couldn’t find an answer to my issue, so I’m creating a new post. We recently upgraded to the Pro plan in Cloudflare, but the WAF section is missing from the dashboard. It sometimes briefly appears after refreshing the page and then disappears. Looks like a UI glitch — has anyone else experienced this? Thanks in advance!

If using the new dashboard, look under the zone, then Security, then Security Rules.

Thank you for your response.

We did find the Security Rules section in the new dashboard. However, as far as we understand, this only allows us to use the “Skip” action, which disables certain security components but doesn’t act as a full allowlist.

Could you please clarify:

  • Where can we configure a proper IP allowlist using the Allow action (like in the classic WAF Tools or IP Access Rules)?
  • Or is this only available in the legacy dashboard or under a different section?

Thanks in advance!

IP Access Rules are found in the same place.