Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
16 changes: 16 additions & 0 deletions src/content/changelog/dex/2026-02-19-dex-supports-cmb-eu.mdx

This comment was marked as outdated.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/bonk try again - review this against changelog guidelines.

Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
title: DEX Supports EU Customer Metadata Boundary
description: Digital Experience Monitoring now fully supports the EU Customer Metadata Boundary
date: 2026-02-19

---

[Digital Experience Monitoring (DEX)](/cloudflare-one/insights/dex/) provides visibility into [WARP](/warp-client/) device connectivity and performance to any internal or external application.

Now, all DEX logs are fully compatible with Cloudflare's [Customer Metadata Boundary](/data-localization/metadata-boundary/) (CMB) setting for the 'EU' (European Union), which ensures that DEX logs will not be stored outside the 'EU' when the option is configured.

If a Cloudflare One customer using DEX enables CMB 'EU', they will not see any DEX data in the Cloudflare One dashboard. Customers can ingest DEX data via [LogPush](/logs/logpush/), and build their own analytics and dashboards.

If a customer enables CMB in their account, they will see the following message in the Digital Experience dashboard: "DEX data is unavailable because Customer Metadata Boundary configuration is on. Use Cloudflare LogPush to export DEX datasets."

![Digital Experience Monitoring message when Customer Metadata Boundary for the EU is enabled](~/assets/images/changelog/dex/dex_supports_cmb.png)
21 changes: 12 additions & 9 deletions src/content/docs/data-localization/compatibility.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -107,15 +107,16 @@ The table below provides a summary of the Data Localization Suite product's beha

## Zero Trust

| Product | Geo Key Manager | Regional Services | Customer Metadata Boundary |
| ----------------- | --------------- | ----------------- | -------------------------- |
| Access | 🚧 [^14] | 🚧 [^15] | ✅ [^16] |
| Browser Isolation | ⚫️ | 🚧 [^17] | ✅ |
| CASB | ⚫️ | ⚫️ | ✘ |
| Cloudflare Tunnel | ⚫️ | 🚧 [^18] | ⚫️ |
| DLP | ⚫️ [^19] | ⚫️ [^19] | 🚧 [^31] |
| Gateway | 🚧 [^20] | 🚧 [^21] | 🚧 [^22] |
| WARP | ⚫️ | ⚫️ | 🚧 [^1] |
| Product | Geo Key Manager | Regional Services | Customer Metadata Boundary |
| ------------------ | --------------- | ----------------- | -------------------------- |
| Access | 🚧 [^14] | 🚧 [^15] | ✅ [^16] |
| Browser Isolation | ⚫️ | 🚧 [^17] | ✅ |
| CASB | ⚫️ | ⚫️ | ✘ |
| Cloudflare Tunnel | ⚫️ | 🚧 [^18] | ⚫️ |
| Digital Experience | ⚫️ | ⚫️ | 🚧 [^49] |
| DLP | ⚫️ [^19] | ⚫️ [^19] | 🚧 [^31] |
| Gateway | 🚧 [^20] | 🚧 [^21] | 🚧 [^22] |
| WARP | ⚫️ | ⚫️ | 🚧 [^1] |

[^1]: Logs / Analytics not available outside US region when using Customer Metadata Boundary.

Expand Down Expand Up @@ -206,3 +207,5 @@ The table below provides a summary of the Data Localization Suite product's beha
[^47]: Only R2 Custom Domains are supported.

[^48]: The following are exceptions and are supported: AI Gateway Analytics (GraphQL Analytics datasets) and Logs (Logpush), R2 Dashboard Metrics & Analytics, Workers AI GraphQL Analytics datasets like aiInferenceAdaptive.

[^49]: Digital Experience supports Cloudflare's [Customer Metadata Boundary](/data-localization/metadata-boundary/get-started) only for the 'EU' (European Union) option
Original file line number Diff line number Diff line change
Expand Up @@ -11,34 +11,34 @@ Be aware that if you enable CMB for a dataset that does not support your region,

| Dataset name | Level | Respects CMB | Available with US CMB region | Available with EU CMB region |
| ------------------------------ | ------- | ------------ | ---------------------------- | ---------------------------- |
| HTTP requests | Zone | ✅ | ✅ | ✅ |
| Firewall events | Zone | ✅ | ✅ | ✅ |
| DNS logs | Zone | ✅ | ✅ | ✅ |
| DNS Firewall logs | Account | ✅ | ✅ | ✅ |
| Spectrum events | Zone | ✅ | ✅ | ✅ |
| Magic IDS Detections | Account | ✅ | ✅ | ✅ |
| Workers Trace Events | Account | ✅ | ✅ | ✅ |
| Zero Trust Sessions | Account | ✅ | ✅ | ✅ |
| Gateway DNS | Account | ✅ | ✅ | ✅ |
| Gateway Network | Account | ✅ | ✅ | ✅ |
| Gateway HTTP | Account | ✅ | ✅ | ✅ |
| Page Shield | Zone | ✅ | ✅ | ✅ |
| Sinkhole Events | Account | ✅ | ✅ | ✅ |
| Access Requests | Account | ✅ | ✅ | ✅ |
| AI Gateway Events | Account | ✅ | ✅ | ✅ |
| DLP Forensic Copies | Account | N/A[^1] | ✘ | ✘ |
| Email security Alerts | Account | ✅ | ✅ | ✅ |
| Zaraz Events | Zone | ✅ | ✅ | ✅ |
| Audit Logs | Account | ✘ | ✅ | ✘ |
| Browser Isolation User Actions | Account | ✅ | ✅ | ✅ |
| NEL reports | Zone | ✘ | ✅ | ✘ |
| CASB Findings | Account | ✘ | ✅ | ✘ |
| Network Analytics Logs | Account | ✅ | ✅ | ✅ |
| Device Posture Results | Account | ✘ | ✅ | ✘ |
| Audit Logs | Account | ✘ | ✅ | ✘ |
| Access Requests | Account | ✅ | ✅ | ✅ |
| IPSec Logs | Account | ✅ | ✅ | ✅ |
| DEX Application Tests | Account | ✅ | ✘ | ✅ |
| DEX Device State Events | Account | ✅ | ✘ | ✅ |
| Device Posture Results | Account | ✘ | ✅ | ✘ |
| DLP Forensic Copies | Account | N/A[^1] | ✘ | ✘ |
| DNS Firewall logs | Account | ✅ | ✅ | ✅ |
| DNS logs | Zone | ✅ | ✅ | ✅ |
| Email security Alerts | Account | ✅ | ✅ | ✅ |
| Firewall events | Zone | ✅ | ✅ | ✅ |
| Gateway DNS | Account | ✅ | ✅ | ✅ |
| Gateway HTTP | Account | ✅ | ✅ | ✅ |
| Gateway Network | Account | ✅ | ✅ | ✅ |
| HTTP requests | Zone | ✅ | ✅ | ✅ |
| IPSec Logs | Account | ✅ | ✅ | ✅ |
| Magic IDS Detections | Account | ✅ | ✅ | ✅ |
| NEL reports | Zone | ✘ | ✅ | ✘ |
| Network Analytics Logs | Account | ✅ | ✅ | ✅ |
| Page Shield | Zone | ✅ | ✅ | ✅ |
| Sinkhole Events | Account | ✅ | ✅ | ✅ |
| Spectrum events | Zone | ✅ | ✅ | ✅ |
| WARP Config Changes | Account | ✅ | ✘ | ✅ |
| WARP Toggle Changes | Account | ✅ | ✘ | ✅ |
| Workers Trace Events | Account | ✅ | ✅ | ✅ |
| Zaraz Events | Zone | ✅ | ✅ | ✅ |
| Zero Trust Sessions | Account | ✅ | ✅ | ✅ |

[^1]: Customer Metadata Boundary does not apply in this case, as these logs are sent directly from the processing location to your configured destination.
Loading