--- title: Firewall --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Firewall #### FirewallLockdowns ##### [List Zone Lockdown rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/lockdowns/methods/list) client.Firewall.Lockdowns.List(ctx, params) (\*V4PagePaginationArray\[[Lockdown]()], error) GET/zones/{zone\_id}/firewall/lockdowns ##### [Get a Zone Lockdown rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/lockdowns/methods/get) client.Firewall.Lockdowns.Get(ctx, lockDownsID, query) (\*[Lockdown](), error) GET/zones/{zone\_id}/firewall/lockdowns/{lock\_downs\_id} ##### [Create a Zone Lockdown rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/lockdowns/methods/create) client.Firewall.Lockdowns.New(ctx, params) (\*[Lockdown](), error) POST/zones/{zone\_id}/firewall/lockdowns ##### [Update a Zone Lockdown rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/lockdowns/methods/update) client.Firewall.Lockdowns.Update(ctx, lockDownsID, params) (\*[Lockdown](), error) PUT/zones/{zone\_id}/firewall/lockdowns/{lock\_downs\_id} ##### [Delete a Zone Lockdown rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/lockdowns/methods/delete) client.Firewall.Lockdowns.Delete(ctx, lockDownsID, body) (\*[LockdownDeleteResponse](), error) DELETE/zones/{zone\_id}/firewall/lockdowns/{lock\_downs\_id} ##### ModelsExpand Collapse
type Configuration \[]ConfigurationItem A list of IP addresses or CIDR ranges that will be allowed to access the URLs specified in the Zone Lockdown rule. You can include any number of ip or ip_range configurations. One of the following:
type LockdownIPConfiguration struct{…} Target LockdownIPConfigurationTargetOptional The configuration target. You must set the target to ip when specifying an IP address in the Zone Lockdown rule. Link to this property Value stringOptional The IP address to match. This address will be compared to the IP address of incoming requests. Link to this property
Link to this property
type LockdownCIDRConfiguration struct{…} Target LockdownCIDRConfigurationTargetOptional The configuration target. You must set the target to ip_range when specifying an IP address range in the Zone Lockdown rule. Link to this property Value stringOptional The IP address range to match. You can only use prefix lengths /16 and /24. Link to this property
Link to this property
[Link to this property](<#(resource)%20firewall.lockdowns%20%3E%20(model)%20configuration%20%3E%20(schema)>)
type Lockdown struct{…} ID string The unique identifier of the Zone Lockdown rule. maxLength32 Link to this property Configurations Configuration A list of IP addresses or CIDR ranges that will be allowed to access the URLs specified in the Zone Lockdown rule. You can include any number of ip or ip_range configurations. Link to this property CreatedOn Time The timestamp of when the rule was created. formatdate-time Link to this property Description string An informative summary of the rule. maxLength1024 Link to this property ModifiedOn Time The timestamp of when the rule was last modified. formatdate-time Link to this property Paused bool When true, indicates that the rule is currently paused. Link to this property URLs \[]LockdownURL The URLs to include in the rule definition. You can use wildcards. Each entered URL will be escaped before use, which means you can only use simple wildcard patterns. Link to this property
[Link to this property](<#(resource)%20firewall.lockdowns%20%3E%20(model)%20lockdown%20%3E%20(schema)>)
type LockdownCIDRConfiguration struct{…} Target LockdownCIDRConfigurationTargetOptional The configuration target. You must set the target to ip_range when specifying an IP address range in the Zone Lockdown rule. Link to this property Value stringOptional The IP address range to match. You can only use prefix lengths /16 and /24. Link to this property
[Link to this property](<#(resource)%20firewall.lockdowns%20%3E%20(model)%20lockdown_cidr_configuration%20%3E%20(schema)>)
type LockdownIPConfiguration struct{…} Target LockdownIPConfigurationTargetOptional The configuration target. You must set the target to ip when specifying an IP address in the Zone Lockdown rule. Link to this property Value stringOptional The IP address to match. This address will be compared to the IP address of incoming requests. Link to this property
[Link to this property](<#(resource)%20firewall.lockdowns%20%3E%20(model)%20lockdown_ip_configuration%20%3E%20(schema)>) type LockdownURL string [Link to this property](<#(resource)%20firewall.lockdowns%20%3E%20(model)%20lockdown_url%20%3E%20(schema)>) #### FirewallRules ##### [List firewall rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/list) Deprecated client.Firewall.Rules.List(ctx, params) (\*V4PagePaginationArray\[[FirewallRule]()], error) GET/zones/{zone\_id}/firewall/rules ##### [Get a firewall rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/get) Deprecated client.Firewall.Rules.Get(ctx, ruleID, query) (\*[FirewallRule](), error) GET/zones/{zone\_id}/firewall/rules/{rule\_id} ##### [Create firewall rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/create) Deprecated client.Firewall.Rules.New(ctx, params) (\*SinglePage\[[FirewallRule]()], error) POST/zones/{zone\_id}/firewall/rules ##### [Update a firewall rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/update) Deprecated client.Firewall.Rules.Update(ctx, ruleID, params) (\*[FirewallRule](), error) PUT/zones/{zone\_id}/firewall/rules/{rule\_id} ##### [Update priority of a firewall rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/edit) Deprecated client.Firewall.Rules.Edit(ctx, ruleID, body) (\*SinglePage\[[FirewallRule]()], error) PATCH/zones/{zone\_id}/firewall/rules/{rule\_id} ##### [Delete a firewall rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/delete) Deprecated client.Firewall.Rules.Delete(ctx, ruleID, body) (\*[FirewallRule](), error) DELETE/zones/{zone\_id}/firewall/rules/{rule\_id} ##### [Update firewall rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/bulk_update) Deprecated client.Firewall.Rules.BulkUpdate(ctx, params) (\*SinglePage\[[FirewallRule]()], error) PUT/zones/{zone\_id}/firewall/rules ##### [Update priority of firewall rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/bulk_edit) Deprecated client.Firewall.Rules.BulkEdit(ctx, params) (\*SinglePage\[[FirewallRule]()], error) PATCH/zones/{zone\_id}/firewall/rules ##### [Delete firewall rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/rules/methods/bulk_delete) Deprecated client.Firewall.Rules.BulkDelete(ctx, body) (\*SinglePage\[[FirewallRule]()], error) DELETE/zones/{zone\_id}/firewall/rules ##### ModelsExpand Collapse
type DeletedFilter struct{…} ID string The unique identifier of the filter. maxLength32 minLength32 Link to this property Deleted bool When true, indicates that the firewall rule was deleted. Link to this property
[Link to this property](<#(resource)%20firewall.rules%20%3E%20(model)%20deleted_filter%20%3E%20(schema)>)
type FirewallRule struct{…} ID stringOptional The unique identifier of the firewall rule. maxLength32 Link to this property Action ActionOptional The action to apply to a matched request. The log action is only available on an Enterprise plan. Link to this property Description stringOptional An informative summary of the firewall rule. maxLength500 Link to this property
Filter FirewallRuleFilterOptional One of the following:
type FirewallFilter struct{…} ID stringOptional The unique identifier of the filter. maxLength32 minLength32 Link to this property Description stringOptional An informative summary of the filter. maxLength500 Link to this property Expression stringOptional The filter expression. For more information, refer to Expressions. Link to this property Paused boolOptional When true, indicates that the filter is currently paused. Link to this property Ref stringOptional A short reference tag. Allows you to select related filters. maxLength50 Link to this property
Link to this property
type DeletedFilter struct{…} ID string The unique identifier of the filter. maxLength32 minLength32 Link to this property Deleted bool When true, indicates that the firewall rule was deleted. Link to this property
Link to this property
Link to this property Paused boolOptional When true, indicates that the firewall rule is currently paused. Link to this property Priority float64Optional The priority of the rule. Optional value used to define the processing order. A lower number indicates a higher priority. If not provided, rules with a defined priority will be processed before rules without a priority. maximum2147483647 minimum0 Link to this property
Products \[]ProductOptional One of the following: const ProductZoneLockdown Product = "zoneLockdown" Link to this property const ProductUABlock Product = "uaBlock" Link to this property const ProductBIC Product = "bic" Link to this property const ProductHot Product = "hot" Link to this property const ProductSecurityLevel Product = "securityLevel" Link to this property const ProductRateLimit Product = "rateLimit" Link to this property const ProductWAF Product = "waf" Link to this property
Link to this property Ref stringOptional A short reference tag. Allows you to select related firewall rules. maxLength50 Link to this property
[Link to this property](<#(resource)%20firewall.rules%20%3E%20(model)%20firewall_rule%20%3E%20(schema)>)
type Product string A list of products to bypass for a request when using the bypass action. One of the following: const ProductZoneLockdown Product = "zoneLockdown" Link to this property const ProductUABlock Product = "uaBlock" Link to this property const ProductBIC Product = "bic" Link to this property const ProductHot Product = "hot" Link to this property const ProductSecurityLevel Product = "securityLevel" Link to this property const ProductRateLimit Product = "rateLimit" Link to this property const ProductWAF Product = "waf" Link to this property
[Link to this property](<#(resource)%20firewall.rules%20%3E%20(model)%20product%20%3E%20(schema)>) #### FirewallAccess Rules ##### [List IP Access rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/access_rules/methods/list) client.Firewall.AccessRules.List(ctx, params) (\*V4PagePaginationArray\[[AccessRuleListResponse]()], error) GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/firewall/access\_rules/rules ##### [Get an IP Access rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/access_rules/methods/get) client.Firewall.AccessRules.Get(ctx, ruleID, query) (\*[AccessRuleGetResponse](), error) GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/firewall/access\_rules/rules/{rule\_id} ##### [Create an IP Access rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/access_rules/methods/create) client.Firewall.AccessRules.New(ctx, params) (\*[AccessRuleNewResponse](), error) POST/{accounts\_or\_zones}/{account\_or\_zone\_id}/firewall/access\_rules/rules ##### [Update an IP Access rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/access_rules/methods/edit) client.Firewall.AccessRules.Edit(ctx, ruleID, params) (\*[AccessRuleEditResponse](), error) PATCH/{accounts\_or\_zones}/{account\_or\_zone\_id}/firewall/access\_rules/rules/{rule\_id} ##### [Delete an IP Access rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/access_rules/methods/delete) client.Firewall.AccessRules.Delete(ctx, ruleID, body) (\*[AccessRuleDeleteResponse](), error) DELETE/{accounts\_or\_zones}/{account\_or\_zone\_id}/firewall/access\_rules/rules/{rule\_id} ##### ModelsExpand Collapse
type AccessRuleCIDRConfiguration struct{…} Target AccessRuleCIDRConfigurationTargetOptional The configuration target. You must set the target to ip_range when specifying an IP address range in the rule. Link to this property Value stringOptional The IP address range to match. You can only use prefix lengths /16 and /24 for IPv4 ranges, and prefix lengths /32, /48, and /64 for IPv6 ranges. Link to this property
[Link to this property](<#(resource)%20firewall.access_rules%20%3E%20(model)%20access_rule_cidr_configuration%20%3E%20(schema)>)
type AccessRuleIPConfiguration struct{…} Target AccessRuleIPConfigurationTargetOptional The configuration target. You must set the target to ip when specifying an IP address in the rule. Link to this property Value stringOptional The IP address to match. This address will be compared to the IP address of incoming requests. Link to this property
[Link to this property](<#(resource)%20firewall.access_rules%20%3E%20(model)%20access_rule_ip_configuration%20%3E%20(schema)>)
type ASNConfiguration struct{…} Target ASNConfigurationTargetOptional The configuration target. You must set the target to asn when specifying an Autonomous System Number (ASN) in the rule. Link to this property Value stringOptional The AS number to match. Link to this property
[Link to this property](<#(resource)%20firewall.access_rules%20%3E%20(model)%20asn_configuration%20%3E%20(schema)>)
type CountryConfiguration struct{…} Target CountryConfigurationTargetOptional The configuration target. You must set the target to country when specifying a country code in the rule. Link to this property Value stringOptional The two-letter ISO-3166-1 alpha-2 code to match. For more information, refer to IP Access rules: Parameters. Link to this property
[Link to this property](<#(resource)%20firewall.access_rules%20%3E%20(model)%20country_configuration%20%3E%20(schema)>)
type IPV6Configuration struct{…} Target IPV6ConfigurationTargetOptional The configuration target. You must set the target to ip6 when specifying an IPv6 address in the rule. Link to this property Value stringOptional The IPv6 address to match. Link to this property
[Link to this property](<#(resource)%20firewall.access_rules%20%3E%20(model)%20ipv6_configuration%20%3E%20(schema)>) #### FirewallUA Rules ##### [List User Agent Blocking rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/ua_rules/methods/list) client.Firewall.UARules.List(ctx, params) (\*V4PagePaginationArray\[[UARuleListResponse]()], error) GET/zones/{zone\_id}/firewall/ua\_rules ##### [Get a User Agent Blocking rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/ua_rules/methods/get) client.Firewall.UARules.Get(ctx, uaRuleID, query) (\*[UARuleGetResponse](), error) GET/zones/{zone\_id}/firewall/ua\_rules/{ua\_rule\_id} ##### [Create a User Agent Blocking rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/ua_rules/methods/create) client.Firewall.UARules.New(ctx, params) (\*[UARuleNewResponse](), error) POST/zones/{zone\_id}/firewall/ua\_rules ##### [Update a User Agent Blocking rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/ua_rules/methods/update) client.Firewall.UARules.Update(ctx, uaRuleID, params) (\*[UARuleUpdateResponse](), error) PUT/zones/{zone\_id}/firewall/ua\_rules/{ua\_rule\_id} ##### [Delete a User Agent Blocking rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/ua_rules/methods/delete) client.Firewall.UARules.Delete(ctx, uaRuleID, body) (\*[UARuleDeleteResponse](), error) DELETE/zones/{zone\_id}/firewall/ua\_rules/{ua\_rule\_id} #### FirewallWAF #### FirewallWAFOverrides ##### [List WAF overrides](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/overrides/methods/list) Deprecated client.Firewall.WAF.Overrides.List(ctx, params) error GET/zones/{zone\_id}/firewall/waf/overrides ##### [Get a WAF override](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/overrides/methods/get) Deprecated client.Firewall.WAF.Overrides.Get(ctx, overridesID, query) error GET/zones/{zone\_id}/firewall/waf/overrides/{overrides\_id} ##### [Create a WAF override](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/overrides/methods/create) Deprecated client.Firewall.WAF.Overrides.New(ctx, params) error POST/zones/{zone\_id}/firewall/waf/overrides ##### [Update WAF override](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/overrides/methods/update) Deprecated client.Firewall.WAF.Overrides.Update(ctx, overridesID, params) error PUT/zones/{zone\_id}/firewall/waf/overrides/{overrides\_id} ##### [Delete a WAF override](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/overrides/methods/delete) Deprecated client.Firewall.WAF.Overrides.Delete(ctx, overridesID, body) error DELETE/zones/{zone\_id}/firewall/waf/overrides/{overrides\_id} ##### ModelsExpand Collapse type OverrideURL string [Link to this property](<#(resource)%20firewall.waf.overrides%20%3E%20(model)%20override_url%20%3E%20(schema)>)
type RewriteAction struct{…} Specifies that, when a WAF rule matches, its configured action will be replaced by the action configured in this object.
Block RewriteActionBlockOptional The WAF rule action to apply. One of the following: const RewriteActionBlockChallenge RewriteActionBlock = "challenge" Link to this property const RewriteActionBlockBlock RewriteActionBlock = "block" Link to this property const RewriteActionBlockSimulate RewriteActionBlock = "simulate" Link to this property const RewriteActionBlockDisable RewriteActionBlock = "disable" Link to this property const RewriteActionBlockDefault RewriteActionBlock = "default" Link to this property
Link to this property
Challenge RewriteActionChallengeOptional The WAF rule action to apply. One of the following: const RewriteActionChallengeChallenge RewriteActionChallenge = "challenge" Link to this property const RewriteActionChallengeBlock RewriteActionChallenge = "block" Link to this property const RewriteActionChallengeSimulate RewriteActionChallenge = "simulate" Link to this property const RewriteActionChallengeDisable RewriteActionChallenge = "disable" Link to this property const RewriteActionChallengeDefault RewriteActionChallenge = "default" Link to this property
Link to this property
Default RewriteActionDefaultOptional The WAF rule action to apply. One of the following: const RewriteActionDefaultChallenge RewriteActionDefault = "challenge" Link to this property const RewriteActionDefaultBlock RewriteActionDefault = "block" Link to this property const RewriteActionDefaultSimulate RewriteActionDefault = "simulate" Link to this property const RewriteActionDefaultDisable RewriteActionDefault = "disable" Link to this property const RewriteActionDefaultDefault RewriteActionDefault = "default" Link to this property
Link to this property
Disable RewriteActionDisableOptional The WAF rule action to apply. One of the following: const RewriteActionDisableChallenge RewriteActionDisable = "challenge" Link to this property const RewriteActionDisableBlock RewriteActionDisable = "block" Link to this property const RewriteActionDisableSimulate RewriteActionDisable = "simulate" Link to this property const RewriteActionDisableDisable RewriteActionDisable = "disable" Link to this property const RewriteActionDisableDefault RewriteActionDisable = "default" Link to this property
Link to this property
Simulate RewriteActionSimulateOptional The WAF rule action to apply. One of the following: const RewriteActionSimulateChallenge RewriteActionSimulate = "challenge" Link to this property const RewriteActionSimulateBlock RewriteActionSimulate = "block" Link to this property const RewriteActionSimulateSimulate RewriteActionSimulate = "simulate" Link to this property const RewriteActionSimulateDisable RewriteActionSimulate = "disable" Link to this property const RewriteActionSimulateDefault RewriteActionSimulate = "default" Link to this property
Link to this property
[Link to this property](<#(resource)%20firewall.waf.overrides%20%3E%20(model)%20rewrite_action%20%3E%20(schema)>)
type WAFRule map\[string, WAFRuleItem] An object that allows you to override the action of specific WAF rules. Each key of this object must be the ID of a WAF rule, and each value must be a valid WAF action. Unless you are disabling a rule, ensure that you also enable the rule group that this WAF rule belongs to. When creating a new URI-based WAF override, you must provide a groups object or a rules object. One of the following: const WAFRuleItemChallenge WAFRuleItem = "challenge" Link to this property const WAFRuleItemBlock WAFRuleItem = "block" Link to this property const WAFRuleItemSimulate WAFRuleItem = "simulate" Link to this property const WAFRuleItemDisable WAFRuleItem = "disable" Link to this property const WAFRuleItemDefault WAFRuleItem = "default" Link to this property
[Link to this property](<#(resource)%20firewall.waf.overrides%20%3E%20(model)%20waf_rule%20%3E%20(schema)>) #### FirewallWAFPackages ##### [List WAF packages](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/methods/list) Deprecated client.Firewall.WAF.Packages.List(ctx, params) (\*V4PagePaginationArray\[[WAFPackageListResponse]()], error) GET/zones/{zone\_id}/firewall/waf/packages ##### [Get a WAF package](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/methods/get) Deprecated client.Firewall.WAF.Packages.Get(ctx, packageID, query) (\*unknown, error) GET/zones/{zone\_id}/firewall/waf/packages/{package\_id} #### FirewallWAFPackagesGroups ##### [List WAF rule groups](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/subresources/groups/methods/list) Deprecated client.Firewall.WAF.Packages.Groups.List(ctx, packageID, params) (\*V4PagePaginationArray\[[Group]()], error) GET/zones/{zone\_id}/firewall/waf/packages/{package\_id}/groups ##### [Get a WAF rule group](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/subresources/groups/methods/get) Deprecated client.Firewall.WAF.Packages.Groups.Get(ctx, packageID, groupID, query) (\*unknown, error) GET/zones/{zone\_id}/firewall/waf/packages/{package\_id}/groups/{group\_id} ##### [Update a WAF rule group](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/subresources/groups/methods/edit) Deprecated client.Firewall.WAF.Packages.Groups.Edit(ctx, packageID, groupID, params) (\*unknown, error) PATCH/zones/{zone\_id}/firewall/waf/packages/{package\_id}/groups/{group\_id} ##### ModelsExpand Collapse
type Group struct{…} ID string Defines the unique identifier of the rule group. maxLength32 Link to this property Description string Defines an informative summary of what the rule group does. Link to this property
Mode GroupMode Defines the state of the rules contained in the rule group. When on, the rules in the group are configurable/usable. One of the following: const GroupModeOn GroupMode = "on" Link to this property const GroupModeOff GroupMode = "off" Link to this property
Link to this property Name string Defines the name of the rule group. Link to this property RulesCount float64 Defines the number of rules in the current rule group. Link to this property
AllowedModes \[]GroupAllowedModeOptional Defines the available states for the rule group. One of the following: const GroupAllowedModeOn GroupAllowedMode = "on" Link to this property const GroupAllowedModeOff GroupAllowedMode = "off" Link to this property
Link to this property ModifiedRulesCount float64Optional Defines the number of rules within the group that have been modified from their default configuration. Link to this property PackageID stringOptional Defines the unique identifier of a WAF package. maxLength32 Link to this property
[Link to this property](<#(resource)%20firewall.waf.packages.groups%20%3E%20(model)%20group%20%3E%20(schema)>) #### FirewallWAFPackagesRules ##### [List WAF rules](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/subresources/rules/methods/list) Deprecated client.Firewall.WAF.Packages.Rules.List(ctx, packageID, params) (\*V4PagePaginationArray\[[WAFPackageRuleListResponse]()], error) GET/zones/{zone\_id}/firewall/waf/packages/{package\_id}/rules ##### [Get a WAF rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/subresources/rules/methods/get) Deprecated client.Firewall.WAF.Packages.Rules.Get(ctx, packageID, ruleID, query) (\*unknown, error) GET/zones/{zone\_id}/firewall/waf/packages/{package\_id}/rules/{rule\_id} ##### [Update a WAF rule](https://developers.cloudflare.com/api/go/resources/firewall/subresources/waf/subresources/packages/subresources/rules/methods/edit) Deprecated client.Firewall.WAF.Packages.Rules.Edit(ctx, packageID, ruleID, params) (\*[WAFPackageRuleEditResponse](), error) PATCH/zones/{zone\_id}/firewall/waf/packages/{package\_id}/rules/{rule\_id} ##### ModelsExpand Collapse
type AllowedModesAnomaly string Defines the mode anomaly. When set to on, the current WAF rule will be used when evaluating the request. Applies to anomaly detection WAF rules. One of the following: const AllowedModesAnomalyOn AllowedModesAnomaly = "on" Link to this property const AllowedModesAnomalyOff AllowedModesAnomaly = "off" Link to this property
[Link to this property](<#(resource)%20firewall.waf.packages.rules%20%3E%20(model)%20allowed_modes_anomaly%20%3E%20(schema)>)
type WAFRuleGroup struct{…} Defines the rule group to which the current WAF rule belongs. ID stringOptional Defines the unique identifier of the rule group. maxLength32 Link to this property Name stringOptional Defines the name of the rule group. Link to this property
[Link to this property](<#(resource)%20firewall.waf.packages.rules%20%3E%20(model)%20waf_rule_group%20%3E%20(schema)>)