---
title: WAF fields · Cloudflare Logs docs
description: The Web Application Firewall (WAF) contains rules managed by Cloudflare to block requests that contain malicious content.
lastUpdated: 2024-08-13T19:56:56.000Z
source_url:
  html: https://a74404c8.preview.developers.cloudflare.com/logs/reference/waf-fields/index.md
  md: https://a74404c8.preview.developers.cloudflare.com/logs/reference/waf-fields/
---

The Web Application Firewall (WAF) contains rules managed by Cloudflare to block requests that contain malicious content.

## WAF Action

| Value | Action | Description |
| - | - | - |
| `0` | Unknown | Take no other action. |
| `1` | Allow | Bypass all subsequent WAF rules. |
| `2` | Drop | Block with an HTTP 403 response. |
| `3` | Challenge Allow | Issue a Managed Challenge. |
| `4` | Challenge Drop | Unused. |
| `5` | Log | Take no action other than logging the event. |

## Deprecated fields for internal Cloudflare use

The values of these fields are subject to change by Cloudflare at any time and are irrelevant for customer data analysis:

* WAFFlags
* WAFMatchedVar
