Known Zone Entitlements
abuse
| Entitlement | Type |
|---|---|
| ts.manual_process | bool |
always_online
| Entitlement | Type |
|---|---|
| always_online.crawl_frequency | max_count |
api_discovery
| Entitlement | Type |
|---|---|
| api_discovery.allowed | bool |
api_routing
| Entitlement | Type |
|---|---|
| api_routing.allowed | bool |
argo
| Entitlement | Type |
|---|---|
| argo.allow_smart_routing | bool |
| argo.allow_tiered_caching | bool |
bot_management
| Entitlement | Type |
|---|---|
| bot_management.enabled | bool |
| bot_management.session_score | bool |
| bot_management.workers_enabled | bool |
cache
| Entitlement | Type |
|---|---|
| cache.allow_vary | bool |
central_endpoint_list
| Entitlement | Type |
|---|---|
| central_endpoint_list.allowed | bool |
| central_endpoint_list.api_gateway_phases_max_ruleset_size | max_count |
| central_endpoint_list.max_endpoints_per_zone | max_count |
| central_endpoint_list.max_learned_schemas_per_zone | max_count |
| central_endpoint_list.max_schemas_per_zone | max_count |
| central_endpoint_list.max_translated_schema_bytes_per_zone | max_count |
| central_endpoint_list.max_validated_schemas_per_zone | max_count |
| central_endpoint_list.schema_validation_allowed | bool |
custom_pages
| Entitlement | Type |
|---|---|
| custom_pages.enabled | bool |
dns
| Entitlement | Type |
|---|---|
| authoritative_dns.max_record_allowed | max_count |
| authoritative_dns.max_record_comment_length | max_count |
| authoritative_dns.max_record_tag_value_length | max_count |
| authoritative_dns.max_record_tags | max_count |
| authoritative_dns.min_record_ttl_allowed | max_count |
| authoritative_dns.proxy_record_allowed | bool |
| dns_records_api.bypass_anti_abuse_logic | bool |
| foundation_dns.advanced_nameservers_allowed | bool |
endpoint_abuse_detection
| Entitlement | Type |
|---|---|
| endpoint_abuse_detection.parameter_learning_allowed | bool |
| endpoint_abuse_detection.sequential_allowed | bool |
| endpoint_abuse_detection.sequential_max_rules | max_count |
| endpoint_abuse_detection.volumetric_allowed | bool |
endpoint_matching
| Entitlement | Type |
|---|---|
| endpoint_matching.allowed | bool |
filters
| Entitlement | Type |
|---|---|
| filters.adv_threat_intel_allowed | bool |
| filters.advanced_geoip_enabled | bool |
| filters.bot_management_enabled | bool |
| filters.hmac_function_enabled | bool |
| filters.managed_lists_open_proxies_allowed | bool |
| filters.operator_regex | bool |
| filters.request_body_inspection_enabled | bool |
| filters.wafml_enabled | bool |
firewall
| Entitlement | Type |
|---|---|
| fw.rule_testing.enabled | bool |
firewalluablock
| Entitlement | Type |
|---|---|
| firewalluablock.max_rules | max_count |
fwrules
| Entitlement | Type |
|---|---|
| fwrules.action_bypass_paid | bool |
| fwrules.actions_log | bool |
| fwrules.max_rules | max_count |
graphql_api
| Entitlement | Type |
|---|---|
| graphql_api.enabled_beta | bool |
| graphql_api.enabled_bot_management | bool |
| graphql_api.enabled_dos | bool |
| graphql_api.enabled_za_biz | bool |
| graphql_api.enabled_za_ent | bool |
| graphql_api.enabled_za_free | bool |
| graphql_api.enabled_za_pro | bool |
| graphql_api.maximum_duration_firewallEvents | max_count |
| graphql_api.maximum_duration_firewallEventsGroups | max_count |
graphql_query_analytics
| Entitlement | Type |
|---|---|
| graphql_query_analytics.allowed | bool |
graphqlv2
| Entitlement | Type |
|---|---|
| graphql_api_v2.enabled_bot_management | bool |
| graphql_api_v2.enabled_page_shield_reports | bool |
health_checks
| Entitlement | Type |
|---|---|
| health_checks.count | max_count |
| health_checks.enabled | bool |
| health_checks.minimum_interval | max_count |
| health_checks.region_count | max_count |
image_resizing
| Entitlement | Type |
|---|---|
| image_resizing.enabled | bool |
intel
| Entitlement | Type |
|---|---|
| intel.api_domain_limit | max_count |
| intel.api_phishing_url_scanner_limit | max_count |
| intel.brand_protection.brand_limit | max_count |
| intel.brand_protection.pattern_limit | max_count |
ip_certificates
| Entitlement | Type |
|---|---|
| ip_certificates | max_count |
ip_firewall
| Entitlement | Type |
|---|---|
| ip_firewall.country_block_enabled | bool |
| ip_firewall.country_challenge_enabled | bool |
| ip_firewall.country_jschl_enabled | bool |
| ip_firewall.max_rules | max_count |
logpush
| Entitlement | Type |
|---|---|
| logpush.bot_management.enabled | bool |
| logpush.dns_logs.max_jobs_allowed | max_count |
| logpush.firewall_events.max_jobs_allowed | max_count |
| logpush.http_requests.max_jobs_allowed | max_count |
| logpush.max_instant_logs_jobs_allowed | max_count |
| logpush.nel_reports.max_jobs_allowed | max_count |
| logpush.page_shield_events.max_jobs_allowed | max_count |
| logpush.spectrum_events.max_jobs_allowed | max_count |
logshare
| Entitlement | Type |
|---|---|
| logshare.bot_management.enabled | bool |
| logshare.enabled | bool |
managed_client_cert
| Entitlement | Type |
|---|---|
| managed_client_cert.certs | max_count |
managed_hostname
| Entitlement | Type |
|---|---|
| managed_hostname.certificates | max_count |
| managed_hostname.metadata_access | bool |
page_rules
| Entitlement | Type |
|---|---|
| page_rules | max_count |
page_shield
| Entitlement | Type |
|---|---|
| page_shield.connection_monitor_allowed | bool |
| page_shield.resource_inventory_export_allowed | bool |
proxy_anything
| Entitlement | Type |
|---|---|
| proxy_anything.argo_smart_routing | bool |
rate_limiting
| Entitlement | Type |
|---|---|
| rate_limiting.allow_body_control | bool |
| rate_limiting.allow_bypass | bool |
| rate_limiting.allow_edge_traffic | bool |
| rate_limiting.allow_method_control | bool |
| rate_limiting.allow_sampling_period_wildcard | bool |
| rate_limiting.allow_simulate | bool |
| rate_limiting.allow_status_control | bool |
| rate_limiting.allow_timeout_wildcard | bool |
| rate_limiting.challenge_enabled | bool |
| rate_limiting.jsch_enabled | bool |
| rate_limiting.managed_challenge_enabled | bool |
| rate_limiting.max_rules | max_count |
| rate_limiting.resp_headers | max_count |
| rate_limiting.sampling_period_bounds | range |
| rate_limiting.sampling_period_secs | enum_number |
| rate_limiting.timeout_bounds | range |
| rate_limiting.timeout_secs | enum_number |
registrar
| Entitlement | Type |
|---|---|
| cf_registrar.enabled | bool |
rulesets
| Entitlement | Type |
|---|---|
| rulesets.adv_geoip_allowed | bool |
| rulesets.adv_threat_intel_allowed | bool |
| rulesets.api_shield_graphql_query_analytics_allowed | bool |
| rulesets.block_customized_response_allowed | bool |
| rulesets.body_inspection_allowed | bool |
| rulesets.bots_management_allowed | bool |
| rulesets.cache_settings_rule_custom_cache_key_allowed | bool |
| rulesets.cache_settings_rule_max | max_count |
| rulesets.config_rule_disable_railgun_allowed | bool |
| rulesets.config_rule_disable_waitroom_allowed | bool |
| rulesets.config_rule_max | max_count |
| rulesets.config_rule_mirage_allowed | bool |
| rulesets.config_rule_polish_allowed | bool |
| rulesets.config_rule_security_level_off_allowed | bool |
| rulesets.config_rule_ssl_origin_pull_allowed | bool |
| rulesets.config_rule_sxg_allowed | bool |
| rulesets.custom_errors_max_rules | max_count |
| rulesets.ddos_l7_sensitivity_limit | max_count |
| rulesets.dynamic_redirect_rule_max | max_count |
| rulesets.firewall_custom_max_rules_per_ruleset | max_count |
| rulesets.firewall_custom_phase_allowed | bool |
| rulesets.fw_global_rulesets_execute_ddos_l7_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_definite_bots | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_bot_management_likely_bots | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_ceccr_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_cmr_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_cor_allowed | bool |
| rulesets.fw_global_rulesets_execute_firewall_managed_cramr_allowed | bool |
| rulesets.fw_global_rulesets_execute_request_late_transform_managed_headers_allowed | bool |
| rulesets.fw_global_rulesets_execute_response_managed_headers_allowed | bool |
| rulesets.fw_global_rulesets_execute_sanitization_allowed | bool |
| rulesets.hmac_function_allowed | bool |
| rulesets.labelled_releases_allowed | bool |
| rulesets.log_action_allowed | bool |
| rulesets.managed_lists_open_proxies_allowed | bool |
| rulesets.managed_rules_allowed | bool |
| rulesets.matched_data_logging_allowed | bool |
| rulesets.max_api_shields | max_count |
| rulesets.max_ddos_l7_rules | max_count |
| rulesets.max_endpoints_per_shield | max_count |
| rulesets.max_page_shield_rules_per_ruleset | max_count |
| rulesets.max_ratelimit_rules_per_ruleset | max_count |
| rulesets.migration_firewall_custom_phase_allowed | bool |
| rulesets.origin_rule_host_header_allowed | bool |
| rulesets.origin_rule_max | max_count |
| rulesets.origin_rule_origin_host_allowed | bool |
| rulesets.origin_rule_origin_port_allowed | bool |
| rulesets.origin_rule_sni_override_allowed | bool |
| rulesets.owning_root_rulesets_allowed | bool |
| rulesets.ratelimit_level | max_count |
| rulesets.ratelimit_sampling_period | enum_number |
| rulesets.regex_operator_allowed | bool |
| rulesets.response_compression_max_rules | max_count |
| rulesets.response_phase_allowed | bool |
| rulesets.snippets_rule_max | max_count |
| rulesets.transform_max_rules | max_count |
| rulesets.transform_phase_regex_allowed | bool |
| rulesets.true_client_ip_allowed | bool |
| rulesets.waf_migration_validation_allowed | bool |
| rulesets.wafml_score_allowed | bool |
| rulesets.waiting_rooms_custom_rules_allowed | bool |
rum
| Entitlement | Type |
|---|---|
| rum.max_rules | max_count |
script_monitor
| Entitlement | Type |
|---|---|
| script_monitor.allowed | bool |
| script_monitor.configure_dedicated_domain_reporting_allowed | bool |
| script_monitor.malicious_domain_checks_allowed | bool |
| script_monitor.malicious_script_checks_allowed | bool |
| script_monitor.page_attribution_allowed | bool |
sni_custom_certificates
| Entitlement | Type |
|---|---|
| sni_custom_certificates | max_count |
snippets
| Entitlement | Type |
|---|---|
| snippets.max_snippets_allowed | max_count |
token_validation
| Entitlement | Type |
|---|---|
| token_validation.allowed | bool |
| token_validation.max_configs_per_zone | max_count |
waf_overrides
| Entitlement | Type |
|---|---|
| waf_overrides.max_rules | max_count |
wafml
| Entitlement | Type |
|---|---|
| wafml.score_allowed | bool |
waiting_rooms
| Entitlement | Type |
|---|---|
| waiting_rooms.allowed | bool |
| waiting_rooms.change_queueing_method_allowed | bool |
| waiting_rooms.count | max_count |
| waiting_rooms.custom_page_allowed | bool |
| waiting_rooms.disable_session_renewal_allowed | bool |
| waiting_rooms.event_count | max_count |
| waiting_rooms.json_response_allowed | bool |
| waiting_rooms.schedule_event_allowed | bool |
zone
| Entitlement | Type |
|---|---|
| zone.advanced_certificate_manager | bool |
| zone.automatic_platform_optimization | bool |
| zone.increase_http_timeout | bool |
| zone.long_lived_grpc | bool |
| zone.mirage | bool |
| zone.partial_setup_allowed | bool |
zone_analytics
| Entitlement | Type |
|---|---|
| zone_analytics.minimum_duration_colos | max_count |
| zone_analytics.minimum_duration_zone | max_count |
zone_custom_ns
| Entitlement | Type |
|---|---|
| zone_custom_ns.allowed | bool |
zonelockdown
| Entitlement | Type |
|---|---|
| zonelockdown.max_rules | max_count |
Have an entitlement not covered on the list? Reach out to @CherryJimbo on Twitter or CherryJimbo#0001 on Discord.