---
title: Enable security filters · Cloudflare Zero Trust docs
description: WAN Tunnels customers have automatic access to Magic Firewall.
  Magic Firewall is Cloudflare's firewall-as-a-service solution that allows you
  to protect your infrastructure. Magic Firewall supports layers three and four
  of the OSI model, and enables you to allow or block traffic on a variety of
  packet characteristics.
lastUpdated: 2025-10-27T11:06:15.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/security/
  md: https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/security/index.md
---

WAN Tunnels customers have [automatic access to Magic Firewall](https://developers.cloudflare.com/magic-firewall/plans/). Magic Firewall is Cloudflare's firewall-as-a-service solution that allows you to protect your infrastructure. Magic Firewall supports layers three and four of the [OSI model](https://www.cloudflare.com/learning/ddos/glossary/open-systems-interconnection-model-osi/), and enables you to allow or block traffic on a variety of packet characteristics.

Refer to [Magic Firewall](https://developers.cloudflare.com/magic-firewall/) for more information about this product.

As a WAN Tunnels customer, you can also use Cloudflare Gateway to set up policies to inspect network and HTTP traffic to the Internet or your private network infrastructure. Refer to [Connect to Cloudflare Gateway with Magic WAN](https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/zero-trust/cloudflare-gateway/) to learn how to filter WAN Tunnels traffic with Gateway policies.
