Cloudflare

About this document

This document provides the step-by-step procedure to configure Cloudflare in SAFE.

Introduction

SAFE integrates with Cloudflare, and fetches the security misconfiguration of the Cloudflare account in SAFE.

Prerequisites

• Access required in SAFE:

  • SAFE Admin Access

• Access required in Cloudflare:

  • Cloudflare Admin

• Required User Input:

  • API URL

  • Access Token

  • Asset Name in SAFE (optional)

• Required Scope:

  • Account Settings:Read

  • Zones Settings:Read

Generate Connection Details

Generate an Access Token

Steps:

• Login to Cloudflare as Admin.

• Go to My Profile from the top right corner.

  

• Click on the API Tokens from the left navigation.

• Click on the Create Token button.

  

• Click on the Get started button next to Create Custom Token.

  

• Select the following permissions:

  • Permissions

    • Account Settings: Read

    • User Details: Read

    • Zone Settings: Read

  • Account Resources

    • Include: All Accounts

  • Zone Resources

    • Include: All Zones

• Click on the Continue to Summary button.

  

• Click on Create Token.

  

• Copy and save the API Token. You will need the API Token while configuring Cloudflare in SAFE.

  It's important to regularly update the API Token in SAFE according to its expiration date.

  

  Obtain API URL

  Steps:

  ---

• Access the Cloudflare API documentation by clicking on the provided link.

• Upon reaching the Cloudflare API documentation page, locate the section titled API Base URL.

• In the exhibit provided, find the base URL highlighted as 3.

• Copy and save this API Base URL to use it while configuring Cloudflare in SAFE.

  

Configure Cloudflare in SAFE

Steps:

• Log in to your SAFE account as Admin.

• Click on the Integrations option from the left navigation.

• Scroll to find the Cloudflare integration card or search for Cloudguard in the search bar.

  

• Hover over the Cloudflare integration card and click on the Configure button.

• Enter the following:

  • API URL

  • Access Token

  • Asset Name in SAFE -  Provide a unique identifier which can uniquely identify the asset

• Enter the Auto Sync Frequency.

  

• Click on the Test Connection button.

• Once the connection is successful, click on the Save button.

• Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

• Upon a successful sync, the system pulls the Cloudflare assets and their findings in SAFE. You can track the status of the sync in the History table.

  

View Results

Steps:

• Go to the Integrations homepage.

• Scroll to find the Cloudflare integration card or search for Cloudflare in the search bar.

• Click on the Cloudflare integration card for Finding View and Asset View.

  • Finding View: This tab displays all the findings details pulled from Cloudflare.

    

  • Asset View: This tab displays all the assets pulled from Cloudflare.

    

History

Learn More about Integration History here.

SAFE's Outgoing IP Addresses

Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.