Skip to main content
All glossary terms

Proxy & networking

Firewall mode

Firewall mode is a proxy operating mode that evaluates configured request rules to determine whether traffic should be allowed, denied, or handled for review. Rules expressed in Common Expression Language can inspect attributes available to the proxy; the mode is not a claim of complete default-deny or SSRF protection.

Also known as proxy firewall mode.

Why it matters in practice

Firewall evaluation controls policy decisions, while Auto-Auth configures how upstream credentials are inserted. HTTPS traffic that must be inspected for request attributes uses the proxy’s TLS inspection path and requires client trust in its CA. Rule coverage depends on the attributes and routes actually visible to the proxy.

Example

A rule allows a test request to api.example.com only when its method and path match the team’s configured policy.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.