Performance: Firewall
Protect your site from bots and attacks with Challenge Passage, Browser Integrity Check, AI bot blocking and Under Attack Mode.
What it is
Firewall protects your site from malicious bots and attacks directly at CDN level, before traffic reaches your server.
To open it: Performance, then Firewall. At the top you choose the period for the charts: Last hour, Last 24 hours, Last 7 days.
Security & Firewall
- Challenge Passage: how long a visitor who passed a verification can browse before being checked again. Options from 5 minutes to 1 year.
- Browser Integrity Check: blocks requests with suspicious technical data, typical of malicious bots.
- Block AI training bots: prevents crawlers that collect content to train AI models from accessing the site.
Changes are saved immediately. If saving fails you see "Could not update the setting" and the previous value is restored.
Under Attack Mode
Use it only during an attack. When active, every visitor sees a verification page before accessing the site, and suspicious traffic is filtered before it reaches your server.
Consequences to be aware of:
- It also blocks Google and other search engine bots: the site is not crawled and rankings can suffer.
- It also blocks Tuurbo's bots: Ecommerce sync and publishing stop working.
- Real visitors face an extra step before seeing the site.
Keep it on only as long as strictly necessary and turn it off as soon as the attack is over.
Traffic chart
Number of requests mitigated and served by Cloudflare shows: Total, Mitigated by Cloudflare (blocked or challenged), Served by Cloudflare and Served by origin (your server). If you see "CDN is not active on this site", complete the CDN setup first.