Zone Entitlements
abuse
| Entitlement | Default Value |
|---|---|
| ts.manual_process | false |
always_online
| Entitlement | Default Value |
|---|---|
| always_online.crawl_frequency | 1 |
argo
| Entitlement | Default Value |
|---|---|
| argo.allow_tiered_caching | true |
bot_management
| Entitlement | Default Value |
|---|---|
| bot_management.session_score | false |
cache
| Entitlement | Default Value |
|---|---|
| cache.allow_vary | false |
cloud_connector
| Entitlement | Default Value |
|---|---|
| cloud_connector.rule_max | 5 |
dns
| Entitlement | Default Value |
|---|---|
| authoritative_dns.max_record_allowed | 200 |
| authoritative_dns.proxy_record_allowed | true |
| dns_records_api.bypass_anti_abuse_logic | false |
| authoritative_dns.max_record_comment_length | 100 |
| authoritative_dns.max_record_tags | 0 |
| authoritative_dns.max_record_tag_value_length | 100 |
| foundation_dns.advanced_nameservers_allowed | false |
| dns_records_api.max_batch_size | 200 |
filters
| Entitlement | Default Value |
|---|---|
| filters.operator_regex | false |
| filters.advanced_geoip_enabled | false |
| filters.request_body_inspection_enabled | false |
firewalluablock
| Entitlement | Default Value |
|---|---|
| firewalluablock.max_rules | 10 |
fwrules
| Entitlement | Default Value |
|---|---|
| fwrules.max_rules | 5 |
| fwrules.actions_log | false |
graphql_api
| Entitlement | Default Value |
|---|---|
| graphql_api.enabled_za_free | true |
| graphql_api.enabled_za_pro | false |
| graphql_api.enabled_za_biz | false |
| graphql_api.enabled_za_ent | false |
| graphql_api.maximum_duration_firewallEvents | 86400 |
| graphql_api.maximum_duration_firewallEventsGroups | 86400 |
| graphql_api.enabled_dos | false |
health_checks
| Entitlement | Default Value |
|---|---|
| health_checks.enabled | false |
| health_checks.count | 0 |
| health_checks.region_count | 0 |
image_resizing
| Entitlement | Default Value |
|---|---|
| image_resizing.enabled | false |
ip_certificates
| Entitlement | Default Value |
|---|---|
| ip_certificates | 0 |
ip_firewall
| Entitlement | Default Value |
|---|---|
| ip_firewall.country_block_enabled | false |
| ip_firewall.country_challenge_enabled | false |
| ip_firewall.country_jschl_enabled | false |
| ip_firewall.max_rules | 50000 |
logpush
| Entitlement | Default Value |
|---|---|
| logpush.spectrum_events.max_jobs_allowed | 0 |
page_rules
| Entitlement | Default Value |
|---|---|
| page_rules | 3 |
rate_limiting
| Entitlement | Default Value |
|---|---|
| rate_limiting.allow_body_control | false |
| rate_limiting.allow_edge_traffic | false |
| rate_limiting.allow_method_control | false |
| rate_limiting.allow_sampling_period_wildcard | false |
| rate_limiting.allow_simulate | false |
| rate_limiting.allow_status_control | false |
| rate_limiting.allow_timeout_wildcard | false |
| rate_limiting.max_rules | 1 |
| rate_limiting.sampling_period_bounds | {"min":10,"max":60} |
| rate_limiting.sampling_period_secs | [10,60] |
| rate_limiting.timeout_bounds | {"min":60,"max":3600} |
| rate_limiting.timeout_secs | [60,3600] |
| rate_limiting.allow_bypass | false |
| rate_limiting.challenge_enabled | false |
| rate_limiting.jsch_enabled | false |
| rate_limiting.resp_headers | 1 |
rulesets
| Entitlement | Default Value |
|---|---|
| rulesets.owning_root_rulesets_allowed | true |
| rulesets.fw_global_rulesets_execute_sanitization_allowed | true |
| rulesets.transform_phase_regex_allowed | false |
| rulesets.firewall_custom_phase_allowed | true |
| rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_definite_bots | false |
| rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_likely_bots | false |
| rulesets.max_ratelimit_rules_per_ruleset | 1 |
| rulesets.firewall_custom_max_rules_per_ruleset | 5 |
| rulesets.fw_global_rulesets_execute_ddos_l7_allowed | true |
| rulesets.max_ddos_l7_rules | 1 |
| rulesets.ddos_l7_sensitivity_limit | 300 |
| rulesets.transform_max_rules | 10 |
| rulesets.origin_rule_max | 10 |
| rulesets.fw_global_rulesets_execute_request_late_transform_managed_headers_allowed | true |
| rulesets.fw_global_rulesets_execute_response_managed_headers_allowed | true |
| rulesets.ratelimit_level | 0 |
| rulesets.ratelimit_sampling_period | [10] |
| rulesets.origin_rule_origin_port_allowed | true |
| rulesets.block_customized_response_allowed | false |
| rulesets.custom_errors_max_rules | 0 |
| rulesets.cache_settings_rule_max | 10 |
| rulesets.config_rule_max | 10 |
| rulesets.dynamic_redirect_rule_max | 10 |
| rulesets.origin_rule_sni_override_allowed | false |
| rulesets.snippets_rule_max | 5 |
| rulesets.ratelimit_extended_sampling_period_values_allowed | false |
| rulesets.ratelimit_nat_allowed | false |
| rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_all | true |
rum
| Entitlement | Default Value |
|---|---|
| rum.max_rules | 0 |
sni_custom_certificates
| Entitlement | Default Value |
|---|---|
| sni_custom_certificates | 0 |
snippets
| Entitlement | Default Value |
|---|---|
| snippets.max_snippets_allowed | 5 |
zone
| Entitlement | Default Value |
|---|---|
| zone.automatic_platform_optimization | false |
zone_analytics
| Entitlement | Default Value |
|---|---|
| zone_analytics.minimum_duration_zone | 1440 |
| zone_analytics.minimum_duration_colos | 525600 |
zonelockdown
| Entitlement | Default Value |
|---|---|
| zonelockdown.max_rules | 0 |