{"id":7797,"date":"2026-04-20T09:46:54","date_gmt":"2026-04-20T07:46:54","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=7797"},"modified":"2026-04-20T09:46:56","modified_gmt":"2026-04-20T07:46:56","slug":"ce-este-increderea-zero-la-cloudflare","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-zero-trust-at-cloudflare\/","title":{"rendered":"Ce este Zero Trust la Cloudflare"},"content":{"rendered":"<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\" id=\"p-rc_40e24af4cc075501-233\"><strong>Cloudflare Zero Trust<\/strong> is a unified security architecture that operates on a simple, modern principle: <strong>never trust, always verify.<sup><\/sup><\/strong> In a world of remote work and AI-driven threats, it replaces the traditional &#8220;VPN and firewall&#8221; model with a &#8220;Secure Access Service Edge&#8221; (SASE) approach, protecting your users, devices, and data regardless of their physical location.<sup><\/sup><\/p>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"p-rc_40e24af4cc075501-234\">As of <strong>April 2026<\/strong>, the platform (part of <strong>Cloudflare One<\/strong>) has been significantly upgraded to defend against post-quantum threats and automated AI-driven attacks.<sup><\/sup><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-zero-trust-at-cloudflare\/#Core_Components_of_Cloudflare_Zero_Trust\" >Core Components of Cloudflare Zero Trust<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-zero-trust-at-cloudflare\/#The_2026_%E2%80%9CNext-Gen%E2%80%9D_Features\" >The 2026 &#8220;Next-Gen&#8221; Features<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-zero-trust-at-cloudflare\/#Advantages_of_Implementation\" >Advantages of Implementation<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-zero-trust-at-cloudflare\/#How_to_Start_The_Free_Tier\" >How to Start (The Free Tier)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-zero-trust-at-cloudflare\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Core_Components_of_Cloudflare_Zero_Trust\"><\/span><strong>Core Components of Cloudflare Zero Trust<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>1. Cloudflare Access (ZTNA)<\/strong><sup><\/sup><\/h4>\n\n\n\n<\/div>\n\n<div id=\"mybox-498543116\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Acces timpuriu<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Mai ave\u021bi nevoie de ajutor?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contacta\u021bi echipa noastr\u0103 de servicii pentru clien\u021bi.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Trimite mesaj<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\" id=\"p-rc_40e24af4cc075501-235\">Replaces legacy VPNs.<sup><\/sup> It acts as a digital gatekeeper for your applications. Instead of letting a user into your entire network, it grants access <strong>only<\/strong> to specific applications based on their identity, device health, and location.<sup><\/sup><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>2. Cloudflare Gateway (SWG)<\/strong><sup><\/sup><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"p-rc_40e24af4cc075501-236\">A Secure Web Gateway that filters all traffic leaving your devices.<sup><\/sup> It blocks access to malicious sites, phishing domains, and unauthorized SaaS applications, ensuring your team doesn&#8217;t accidentally download malware or leak data.<sup><\/sup><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>3. Cloudflare Tunnel (cloudflared)<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">A critical tool for <strong>mybox<\/strong> users. It creates a secure, encrypted &#8220;tunnel&#8221; from your server to Cloudflare without opening any public ports (like Port 80 or 443). This makes your origin server <strong>invisible<\/strong> to the public internet, completely neutralizing DDoS and port-scanning attacks.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>4. Digital Experience Monitoring (DEX)<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"p-rc_40e24af4cc075501-237\">New in the 2026 suite, <strong>DEX<\/strong> gives IT admins a real-time view of user performance.<sup><\/sup> If a team member in Bucharest is experiencing a slow connection to a tool, DEX identifies if the issue is their local Wi-Fi, their laptop&#8217;s CPU, or a network provider outage.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"The_2026_%E2%80%9CNext-Gen%E2%80%9D_Features\"><\/span><strong>The 2026 &#8220;Next-Gen&#8221; Features<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"p-rc_40e24af4cc075501-238\">Cloudflare has introduced several cutting-edge protections this year:<sup><\/sup><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Post-Quantum Cryptography (PQC):<\/strong> Cloudflare One is the first SASE platform to support <strong>ML-KEM encryption<\/strong>. This protects your data today against &#8220;Harvest Now, Decrypt Later&#8221; attacks, where hackers steal encrypted data now to crack it later with future quantum computers.<\/li>\n\n\n\n<li><strong>AI Security &amp; MCP Shield:<\/strong> As companies adopt AI agents, Cloudflare now secures connections to <strong>Model Context Protocol (MCP)<\/strong> servers, preventing AI bots from accidentally exposing sensitive company data.<\/li>\n\n\n\n<li><strong>Browser Isolation (RBI):<\/strong> High-risk links are opened in a &#8220;virtual browser&#8221; in the cloud. Only safe vector graphics are sent to the user&#8217;s device, meaning zero code from a malicious site ever actually touches the local computer.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Advantages_of_Implementation\"><\/span><strong>Advantages of Implementation<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Feature<\/strong><\/td><td><strong>Traditional Security<\/strong><\/td><td><strong>Cloudflare Zero Trust<\/strong><\/td><\/tr><\/thead><tbody><tr><td><strong>Access<\/strong><\/td><td>VPN (all-or-nothing)<\/td><td><strong>Granular (App-by-App)<\/strong><\/td><\/tr><tr><td><strong>Lateral Movement<\/strong><\/td><td>High (Breach one, breach all)<\/td><td><strong>Zero (Segmented by policy)<\/strong><\/td><\/tr><tr><td><strong>Management<\/strong><\/td><td>Complex Hardware \/ Firewalls<\/td><td><strong>Single Unified Dashboard<\/strong><\/td><\/tr><tr><td><strong>Performance<\/strong><\/td><td>Slow &#8220;Backhauling&#8221; to HQ<\/td><td><strong>Global Edge Speed<\/strong><\/td><\/tr><tr><td><strong>Encryption<\/strong><\/td><td>Standard RSA\/ECC<\/td><td><strong>Post-Quantum Secure (ML-KEM)<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Start_The_Free_Tier\"><\/span><strong>How to Start (The Free Tier)<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">One of the best aspects of Cloudflare Zero Trust is its accessibility for small teams and individuals.<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Sign Up:<\/strong> Create a Zero Trust organization in your Cloudflare dashboard.<\/li>\n\n\n\n<li><strong>Free Tier:<\/strong> Currently supports up to <strong>50 users<\/strong> at no cost, including full ZTNA and Gateway capabilities.<\/li>\n\n\n\n<li><strong>Install WARP:<\/strong> Deploy the Cloudflare WARP client on your devices to begin enforcing security policies and traffic encryption.<\/li>\n\n\n\n<li><strong>Secure your mybox:<\/strong> Use <strong>Cloudflare Tunnel<\/strong> to hide your web server from the public internet, ensuring only authenticated users can reach your management panels.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span><strong>Summary<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cloudflare Zero Trust isn&#8217;t just a product; it\u2019s a <strong>philosophy of verification.<\/strong> By assuming that every connection attempt\u2014even those from inside your office\u2014could be a threat, it creates a &#8220;Hardened Fortress&#8221; around your digital assets.<\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[12],"manual_kb_tag":[205,206,210,242,744,745,767,936,964],"class_list":["post-7797","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-cloudflare","manual_kb_tag-hardware","manual_kb_tag-laptop","manual_kb_tag-edge","manual_kb_tag-mybox","manual_kb_tag-phishing","manual_kb_tag-malware","manual_kb_tag-web-server","manual_kb_tag-cloudflare","manual_kb_tag-dashboard"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/7797","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/7797\/revisions"}],"predecessor-version":[{"id":7798,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/7797\/revisions\/7798"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/media?parent=7797"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manualknowledgebasecat?post=7797"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb_tag?post=7797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}