Cloudflare Magic Firewall

Spec sheet

Purpose

It is a firewall-as-a-service that filters unwanted traffic before it reaches office networks and cloud infrastructure.Read 11 Oct 2026 · developers.cloudflare.com

Deployment

It runs on Cloudflare’s global network without requiring customers to manage firewall hardware appliances.Read 11 Oct 2026 · cloudflare.com

Free plan

NoRead 19 Sep 2026 · cloudflare.com

Integrations

The standard features include integration with Cloudflare WAN, and Magic Transit includes DDoS protection.Read 11 Oct 2026 · developers.cloudflare.com

Headquarters

San Francisco, California, United StatesRead 4 Oct 2026 · cloudflare.com

Founded

2009Read 4 Oct 2026 · cloudflare.com

Advanced features

Advanced features available for purchase include customizable and managed threat intelligence IP lists, geoblocking, ASN filtering, on-demand packet captures, protocol validation, Secure Web Gateway filtering, and IDS.Read 11 Oct 2026 · developers.cloudflare.com

Analytics

Traffic analytics are available per rule in the dashboard and through the GraphQL API.Read 11 Oct 2026 · developers.cloudflare.com

Audience and availability

The product is marked Enterprise-only and is available with a purchase of Magic Transit or Cloudflare WAN.Read 11 Oct 2026 · developers.cloudflare.com

Company security and trust

Cloudflare provides a Trust Hub with trust and compliance information.Read 11 Oct 2026 · cloudflare.com

Management and automation

Firewall and network configuration can be managed from one dashboard or through a programmable API compatible with Terraform.Read 11 Oct 2026 · developers.cloudflare.com

Notable limit

Network Firewall IP lists currently support IPv4 addresses, not IPv6 addresses.Read 11 Oct 2026 · developers.cloudflare.com

Rule behavior

Traffic is permitted by default until a rule blocks it, rules are evaluated in order, and Network Firewall rules run after Cloudflare DDoS mitigations.Read 11 Oct 2026 · developers.cloudflare.com

Rule matching

Rules can match protocol, port, IP addresses, packet length, and bit fields, and changes propagate in less than a minute.Read 11 Oct 2026 · developers.cloudflare.com

Threat detection

The IDS monitors for known threat signatures, including ransomware, data exfiltration, and network scanning.Read 11 Oct 2026 · developers.cloudflare.com

Traffic coverage

It inspects and filters Layer 3 and Layer 4 traffic across headquarters, branch offices, and virtual private clouds.Read 11 Oct 2026 · cloudflare.com

Plans and prices

Every Cloudflare Magic Firewall plan and price →

Where Specifiction places it

• Firewall Management Software#12 of 297.4
• Network Firewall Software#17 of 377.4
• Firewall Software#54 of 817.6