Improved support for private applications and reusable access policies with Cloudflare Access

Cloudflare announces a unified Zero Trust approach that enables defining and securing private IP- and hostname-based applications directly in Cloudflare Access, while using Gateway and the WARP client for private routing. The release adds an application-aware firewall phase in Gateway to detect Access applications and enforce authentication/authorization, introduces per-application session management (JWTs for browser apps and device-bound sessions for others), and debuts reusable policies to streamline consistent access controls across many apps, alongside a refreshed UI. Initial private hostname support is limited to TLS on port 443 with inspection, with broader port/protocol support planned for 2025.