Gateway — Things Worth SharingPosts tagged Gateway.https://cloudsecop.net/Network policy L4 — blocking non-HTTP, DoH bypass, and app ruleshttps://cloudsecop.net/en/blog/network-policy-l4/https://cloudsecop.net/en/blog/network-policy-l4/Network policy deep dive: blocking non-HTTP (SSH, RDP, SMTP), preventing DoH bypass, app rules for SaaS, WARP keeping user traffic on Gateway, prod checklist, hardening playbook.Mon, 19 May 2025 00:00:00 GMTCloudflareCloudflare OneGatewayNetworkingZero TrustKhaVanGateway HTTP filtering and TLS decryption — when DNS isn't enoughhttps://cloudsecop.net/en/blog/gateway-http-filtering-tls-decryption/https://cloudsecop.net/en/blog/gateway-http-filtering-tls-decryption/HTTP inspection deep dive: installing the root CA (MDM, GPO), cert pinning gotchas, DLP patterns, CASB tenant control, legal/privacy guardrails, staged rollout, prod checklist.Wed, 07 May 2025 00:00:00 GMTCloudflareCloudflare OneGatewayTLSDLPCASBKhaVanGateway DNS filtering — the first layer of a Secure Web Gatewayhttps://cloudsecop.net/en/blog/gateway-dns-policies/https://cloudsecop.net/en/blog/gateway-dns-policies/Gateway DNS deep dive: resolver architecture, policy order, DoH per-device vs DNS location per-site, threat categories, custom lists, OS bypasses, SIEM pipeline, prod checklist.Sat, 03 May 2025 00:00:00 GMTCloudflareCloudflare OneGatewayDNSZero TrustKhaVan