Protocol detection with Cloudflare Gateway

Cloudflare introduced protocol detection in its Gateway secure web gateway, enabling administrators to detect, log, and enforce policies on protocols by type rather than relying on ports, helping prevent over/under-blocking while simplifying policy management; supported protocols include HTTP/HTTPS, SSH, TLS, DCE/RPC, MQTT, and TPKT. The feature uses a TCP pre-read hook in the OXY framework to match initial bytes against protocol signatures and enforce allow/block actions, with configuration available in the Zero Trust dashboard and immediate availability to Cloudflare One Enterprise customers.