diff --git a/src/assets/images/changelog/dex/dex_supports_cmb.png b/src/assets/images/changelog/dex/dex_supports_cmb.png new file mode 100644 index 000000000000000..8f00bd88d8dadb3 Binary files /dev/null and b/src/assets/images/changelog/dex/dex_supports_cmb.png differ diff --git a/src/content/changelog/dex/2026-02-19-dex-supports-cmb-eu.mdx b/src/content/changelog/dex/2026-02-19-dex-supports-cmb-eu.mdx new file mode 100644 index 000000000000000..25a72ef1269d528 --- /dev/null +++ b/src/content/changelog/dex/2026-02-19-dex-supports-cmb-eu.mdx @@ -0,0 +1,16 @@ +--- +title: DEX Supports EU Customer Metadata Boundary +description: Digital Experience Monitoring now fully supports the EU Customer Metadata Boundary +date: 2026-02-19 + +--- + +[Digital Experience Monitoring (DEX)](/cloudflare-one/insights/dex/) provides visibility into [WARP](/warp-client/) device connectivity and performance to any internal or external application. + +Now, all DEX logs are fully compatible with Cloudflare's [Customer Metadata Boundary](/data-localization/metadata-boundary/) (CMB) setting for the 'EU' (European Union), which ensures that DEX logs will not be stored outside the 'EU' when the option is configured. + +If a Cloudflare One customer using DEX enables CMB 'EU', they will not see any DEX data in the Cloudflare One dashboard. Customers can ingest DEX data via [LogPush](/logs/logpush/), and build their own analytics and dashboards. + +If a customer enables CMB in their account, they will see the following message in the Digital Experience dashboard: "DEX data is unavailable because Customer Metadata Boundary configuration is on. Use Cloudflare LogPush to export DEX datasets." + +![Digital Experience Monitoring message when Customer Metadata Boundary for the EU is enabled](~/assets/images/changelog/dex/dex_supports_cmb.png) diff --git a/src/content/docs/data-localization/compatibility.mdx b/src/content/docs/data-localization/compatibility.mdx index ad3cc36fe4d4296..913abaa4851df4c 100644 --- a/src/content/docs/data-localization/compatibility.mdx +++ b/src/content/docs/data-localization/compatibility.mdx @@ -107,15 +107,16 @@ The table below provides a summary of the Data Localization Suite product's beha ## Zero Trust -| Product | Geo Key Manager | Regional Services | Customer Metadata Boundary | -| ----------------- | --------------- | ----------------- | -------------------------- | -| Access | 🚧 [^14] | 🚧 [^15] | ✅ [^16] | -| Browser Isolation | ⚫️ | 🚧 [^17] | ✅ | -| CASB | ⚫️ | ⚫️ | ✘ | -| Cloudflare Tunnel | ⚫️ | 🚧 [^18] | ⚫️ | -| DLP | ⚫️ [^19] | ⚫️ [^19] | 🚧 [^31] | -| Gateway | 🚧 [^20] | 🚧 [^21] | 🚧 [^22] | -| WARP | ⚫️ | ⚫️ | 🚧 [^1] | +| Product | Geo Key Manager | Regional Services | Customer Metadata Boundary | +| ------------------ | --------------- | ----------------- | -------------------------- | +| Access | 🚧 [^14] | 🚧 [^15] | ✅ [^16] | +| Browser Isolation | ⚫️ | 🚧 [^17] | ✅ | +| CASB | ⚫️ | ⚫️ | ✘ | +| Cloudflare Tunnel | ⚫️ | 🚧 [^18] | ⚫️ | +| Digital Experience | ⚫️ | ⚫️ | 🚧 [^49] | +| DLP | ⚫️ [^19] | ⚫️ [^19] | 🚧 [^31] | +| Gateway | 🚧 [^20] | 🚧 [^21] | 🚧 [^22] | +| WARP | ⚫️ | ⚫️ | 🚧 [^1] | [^1]: Logs / Analytics not available outside US region when using Customer Metadata Boundary. @@ -206,3 +207,5 @@ The table below provides a summary of the Data Localization Suite product's beha [^47]: Only R2 Custom Domains are supported. [^48]: The following are exceptions and are supported: AI Gateway Analytics (GraphQL Analytics datasets) and Logs (Logpush), R2 Dashboard Metrics & Analytics, Workers AI GraphQL Analytics datasets like aiInferenceAdaptive. + +[^49]: Digital Experience supports Cloudflare's [Customer Metadata Boundary](/data-localization/metadata-boundary/get-started) only for the 'EU' (European Union) option diff --git a/src/content/docs/data-localization/metadata-boundary/logpush-datasets.mdx b/src/content/docs/data-localization/metadata-boundary/logpush-datasets.mdx index ab7fcfec0553eaf..75b74cb3e470a36 100644 --- a/src/content/docs/data-localization/metadata-boundary/logpush-datasets.mdx +++ b/src/content/docs/data-localization/metadata-boundary/logpush-datasets.mdx @@ -11,34 +11,34 @@ Be aware that if you enable CMB for a dataset that does not support your region, | Dataset name | Level | Respects CMB | Available with US CMB region | Available with EU CMB region | | ------------------------------ | ------- | ------------ | ---------------------------- | ---------------------------- | -| HTTP requests | Zone | ✅ | ✅ | ✅ | -| Firewall events | Zone | ✅ | ✅ | ✅ | -| DNS logs | Zone | ✅ | ✅ | ✅ | -| DNS Firewall logs | Account | ✅ | ✅ | ✅ | -| Spectrum events | Zone | ✅ | ✅ | ✅ | -| Magic IDS Detections | Account | ✅ | ✅ | ✅ | -| Workers Trace Events | Account | ✅ | ✅ | ✅ | -| Zero Trust Sessions | Account | ✅ | ✅ | ✅ | -| Gateway DNS | Account | ✅ | ✅ | ✅ | -| Gateway Network | Account | ✅ | ✅ | ✅ | -| Gateway HTTP | Account | ✅ | ✅ | ✅ | -| Page Shield | Zone | ✅ | ✅ | ✅ | -| Sinkhole Events | Account | ✅ | ✅ | ✅ | +| Access Requests | Account | ✅ | ✅ | ✅ | | AI Gateway Events | Account | ✅ | ✅ | ✅ | -| DLP Forensic Copies | Account | N/A[^1] | ✘ | ✘ | -| Email security Alerts | Account | ✅ | ✅ | ✅ | -| Zaraz Events | Zone | ✅ | ✅ | ✅ | +| Audit Logs | Account | ✘ | ✅ | ✘ | | Browser Isolation User Actions | Account | ✅ | ✅ | ✅ | -| NEL reports | Zone | ✘ | ✅ | ✘ | | CASB Findings | Account | ✘ | ✅ | ✘ | -| Network Analytics Logs | Account | ✅ | ✅ | ✅ | -| Device Posture Results | Account | ✘ | ✅ | ✘ | -| Audit Logs | Account | ✘ | ✅ | ✘ | -| Access Requests | Account | ✅ | ✅ | ✅ | -| IPSec Logs | Account | ✅ | ✅ | ✅ | | DEX Application Tests | Account | ✅ | ✘ | ✅ | | DEX Device State Events | Account | ✅ | ✘ | ✅ | +| Device Posture Results | Account | ✘ | ✅ | ✘ | +| DLP Forensic Copies | Account | N/A[^1] | ✘ | ✘ | +| DNS Firewall logs | Account | ✅ | ✅ | ✅ | +| DNS logs | Zone | ✅ | ✅ | ✅ | +| Email security Alerts | Account | ✅ | ✅ | ✅ | +| Firewall events | Zone | ✅ | ✅ | ✅ | +| Gateway DNS | Account | ✅ | ✅ | ✅ | +| Gateway HTTP | Account | ✅ | ✅ | ✅ | +| Gateway Network | Account | ✅ | ✅ | ✅ | +| HTTP requests | Zone | ✅ | ✅ | ✅ | +| IPSec Logs | Account | ✅ | ✅ | ✅ | +| Magic IDS Detections | Account | ✅ | ✅ | ✅ | +| NEL reports | Zone | ✘ | ✅ | ✘ | +| Network Analytics Logs | Account | ✅ | ✅ | ✅ | +| Page Shield | Zone | ✅ | ✅ | ✅ | +| Sinkhole Events | Account | ✅ | ✅ | ✅ | +| Spectrum events | Zone | ✅ | ✅ | ✅ | | WARP Config Changes | Account | ✅ | ✘ | ✅ | | WARP Toggle Changes | Account | ✅ | ✘ | ✅ | +| Workers Trace Events | Account | ✅ | ✅ | ✅ | +| Zaraz Events | Zone | ✅ | ✅ | ✅ | +| Zero Trust Sessions | Account | ✅ | ✅ | ✅ | [^1]: Customer Metadata Boundary does not apply in this case, as these logs are sent directly from the processing location to your configured destination.