--- title: Update firewall rules --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Firewall](https://developers.cloudflare.com/api/resources/firewall) [Rules](https://developers.cloudflare.com/api/resources/firewall/subresources/rules) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Update firewall rules Deprecated: The Firewall Rules API is deprecated in favour of using the Ruleset Engine. See https://developers.cloudflare.com/fundamentals/api/reference/deprecations/#firewall-rules-api-and-filters-api for full details. PUT/zones/{zone\_id}/firewall/rules **This endpoint has been deprecated and returns 410 Gone. Please use the [Rulesets API](https://developers.cloudflare.com/ruleset-engine/) instead.** Updates one or more existing firewall rules. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `Firewall Services Write` ##### P ath ParametersExpand Collapse zone\_id: string Defines an identifier. maxLength32 [Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>) ##### Body ParametersJSONExpand Collapse id: string The unique identifier of the firewall rule. [Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(params)%200%20%3E%20(param)%20id%20%3E%20(schema)>) ##### ReturnsExpand Collapse

errors: array of ResponseInfo { code, message, documentation\_url, source }

code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property

source: optional object {pointer }

pointer: optional string Link to this property

Link to this property

[Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)

messages: array of ResponseInfo { code, message, documentation\_url, source }

code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property

source: optional object {pointer }

pointer: optional string Link to this property

Link to this property

[Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)

result: array of FirewallRule { id, action, description, 5 more }

id: optional string The unique identifier of the firewall rule. maxLength32 Link to this property

action: optional Action The action to apply to a matched request. The log action is only available on an Enterprise plan.

One of the following: "block" Link to this property "challenge" Link to this property "js\_challenge" Link to this property "managed\_challenge" Link to this property "allow" Link to this property "log" Link to this property "bypass" Link to this property

Link to this property description: optional string An informative summary of the firewall rule. maxLength500 Link to this property

filter: optional FirewallFilter { id, description, expression, 2 more } or DeletedFilter { id, deleted }

One of the following:

FirewallFilter object {id, description, expression, 2 more }

id: optional string The unique identifier of the filter. maxLength32 minLength32 Link to this property description: optional string An informative summary of the filter. maxLength500 Link to this property expression: optional string The filter expression. For more information, refer to Expressions. Link to this property paused: optional boolean When true, indicates that the filter is currently paused. Link to this property ref: optional string A short reference tag. Allows you to select related filters. maxLength50 Link to this property

Link to this property

DeletedFilter object {id, deleted }

id: string The unique identifier of the filter. maxLength32 minLength32 Link to this property deleted: boolean When true, indicates that the firewall rule was deleted. Link to this property

Link to this property

Link to this property paused: optional boolean When true, indicates that the firewall rule is currently paused. Link to this property priority: optional number The priority of the rule. Optional value used to define the processing order. A lower number indicates a higher priority. If not provided, rules with a defined priority will be processed before rules without a priority. maximum2147483647 minimum0 Link to this property

products: optional array of Product

One of the following: "zoneLockdown" Link to this property "uaBlock" Link to this property "bic" Link to this property "hot" Link to this property "securityLevel" Link to this property "rateLimit" Link to this property "waf" Link to this property

Link to this property ref: optional string A short reference tag. Allows you to select related firewall rules. maxLength50 Link to this property

[Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(network%20schema)%20%3E%20(property)%20result>) success: true Defines whether the API call was successful. [Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(network%20schema)%20%3E%20(property)%20success>)

result\_info: optional object {count, page, per\_page, total\_count }

count: optional number Defines the total number of results for the requested service. Link to this property page: optional number Defines the current page within paginated list of results. Link to this property per\_page: optional number Defines the number of results per page of results. Link to this property total\_count: optional number Defines the total results available without any search parameters. Link to this property

[Link to this property](<#(resource)%20firewall.rules%20%3E%20(method)%20bulk_update%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>) ### Update firewall rules HTTP HTTPTypeScriptPythonGoTerraform ``` curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/firewall/rules \ -X PUT \ -H 'Content-Type: application/json' \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ -d '{ "id": "id" }' ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "id": "372e67954025e0ba6aaa6d586b9e0b60", "action": "block", "description": "Blocks traffic identified during investigation for MIR-31", "filter": { "id": "372e67954025e0ba6aaa6d586b9e0b61", "description": "Restrict access from these browsers on this address range.", "expression": "(http.request.uri.path ~ \".*wp-login.php\" or http.request.uri.path ~ \".*xmlrpc.php\") and ip.addr ne 172.16.22.155", "paused": false, "ref": "FIL-100" }, "paused": false, "priority": 50, "products": [ "waf" ], "ref": "MIR-31" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "id": "372e67954025e0ba6aaa6d586b9e0b60", "action": "block", "description": "Blocks traffic identified during investigation for MIR-31", "filter": { "id": "372e67954025e0ba6aaa6d586b9e0b61", "description": "Restrict access from these browsers on this address range.", "expression": "(http.request.uri.path ~ \".*wp-login.php\" or http.request.uri.path ~ \".*xmlrpc.php\") and ip.addr ne 172.16.22.155", "paused": false, "ref": "FIL-100" }, "paused": false, "priority": 50, "products": [ "waf" ], "ref": "MIR-31" } ], "success": true, "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000 } } ```