---
title: Enable security filters · Cloudflare One docs
description: Magic WAN customers have automatic access to Magic Firewall. Magic
  Firewall is Cloudflare's firewall-as-a-service solution that allows you to
  protect your infrastructure. Magic Firewall supports layers three and four of
  the OSI model, and enables you to allow or block traffic on a variety of
  packet characteristics.
lastUpdated: 2025-11-04T17:07:51.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/security/
  md: https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/security/index.md
---

Magic WAN customers have [automatic access to Magic Firewall](https://developers.cloudflare.com/magic-firewall/plans/). Magic Firewall is Cloudflare's firewall-as-a-service solution that allows you to protect your infrastructure. Magic Firewall supports layers three and four of the [OSI model](https://www.cloudflare.com/learning/ddos/glossary/open-systems-interconnection-model-osi/), and enables you to allow or block traffic on a variety of packet characteristics.

Refer to [Magic Firewall](https://developers.cloudflare.com/magic-firewall/) for more information about this product.

As a Magic WAN customer, you can also use Cloudflare Gateway to set up policies to inspect network and HTTP traffic to the Internet or your private network infrastructure. Refer to [Connect to Cloudflare Gateway with Magic WAN](https://developers.cloudflare.com/cloudflare-one/networks/connectors/wan-tunnels/zero-trust/cloudflare-gateway/) to learn how to filter Magic WAN traffic with Gateway policies.
