Device posture attributes
With Cloudflare Zero Trust, you can configure Zero Trust policies that rely on additional signals from endpoint security providers to allow or deny connections to your applications.
When device posture checks are configured, users can only connect to a protected application if they have a managed or healthy device, as determined by the endpoint security provider associated to the Access policy regulating access to the protected application.
To enable one or more device posture attributes, navigate to My Team > Devices > Device posture on the Zero Trust dashboard and click +Add.
Available device posture attributes
- Gateway
- WARP
- Azure AD
- Carbon Black
- CrowdStrike
- SentinelOne
- Tanium
- Uptycs
- Workspace ONE
- Mutual TLS
- OS Version
- Device serial numbers
- Application Check
- File Check
- Domain Joined
- Disk Encryption
- Firewall
Verify device posture checks in the WARP client
On desktop clients, you can always verify which device posture checks are active on your devices. To do that:
- Open the WARP client.
- Go to Settings > Advanced.
- Click on Device posture information.
This will show a list of active device posture checks.
