Cloudflare Using Cloudflare Teams & Cloudflare Gateway To Secure Remote Work Places

eva2000 · Mar 21, 2020

With Corona virus spreading, more folks are forced to work remotely from home. As such it's critical to secure your home network so you can safely work from home. Cloudflare two months ago released Cloudflare for Teams which consists of Cloudflare Access and Cloudflare Gateway - which is feature well suited as a first step to securing your remote work environment.

Cloudflare Gateway allows your local/home networks' DNS configuration to be secured and encrypted and allows for DNS filtering. Cloudflare Gateway supports DNS over HTTPS today and will also support DNS over TLS in the future

Cloudflare for Teams centers around two core products - Cloudflare Access and Cloudflare Gateway. Cloudflare Access is already available and used by thousands of teams around the world to secure internal applications. Cloudflare Gateway solves the other end of the problem by protecting those teams from security threats without sacrificing performance.

Today, we’re excited to announce new secure DNS filtering capabilities in Cloudflare Gateway. Cloudflare Gateway protects teams from threats like malware, phishing, ransomware, crypto-mining and other security threats. You can start using Cloudflare Gateway at dash.teams.cloudflare.com. Getting started takes less than five minutes.
Click to expand...

Cloudflare Gateway
Starting today, businesses of all sizes can secure all their Internet-bound traffic and make it faster with Cloudflare Gateway. Cloudflare has data centers in more than 200 cities around the world and all of our services run in every single data center. Therefore, when a business uses Cloudflare Gateway, instead of backhauling traffic to a single location (slow), all Internet-bound requests travel to the nearest data center (fast) from the end user where Cloudflare Gateway applies security policies to protect businesses from security threats. All of this is done without the need for expensive MPLS links.
Click to expand...

How Cloudflare Gateway differs from Cloudflare public DNS resolvers 1.1.1.1/1.0.0.1

The primary difference between the 1.1.1.1 public DNS resolver and Gateway’s secure DNS filtering is that the 1.1.1.1 public DNS resolver does not block any DNS queries. When a browser requests example.com, the 1.1.1.1 public DNS resolver simply looks up the answer for the DNS query either in cache or by performing a full recursive query.

Cloudflare Gateway adds one new step to introduce security into this flow. Instead of allowing all DNS queries, Gateway first checks the name being queried against the intelligence Cloudflare has about threats on the Internet. If that query matches a known threat, or is requesting a blocked category, Gateway stops it before the site could load for the user - and potentially execute code or phish that team member.
Click to expand...

Example for my Cloudflare Gateway setup for one my home networks from initial onboarding setup to actual DNS usage.

Once Cloudflare Gateway DNS is setup on home local network, you will see your network's DNS queries being tracked and recorded on Cloudflare Gateway overview dashboard.

You can then create and assign Gateway policies to filter DNS traffic. Example of blocking DNS queries by security threat categories.

And video from Cloudflare Gateway Product Manager, Mohd Irtefa at https://www.loom.com/share/291805a381424b908cc32eda43ad2c66

eva2000 · Mar 25, 2020

More Cloudflare Access and Cloudflare Gateway video demos have been posted on Cloudflare community forum at Demo - Access & Gateway

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Cloudflare Using Cloudflare Teams & Cloudflare Gateway To Secure Remote Work Places

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Cloudflare Using Cloudflare Teams & Cloudflare Gateway To Secure Remote Work Places

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.