cloudflare-one-migrations

Cloudflare One Migrations Retrieve current Cloudflare docs, Cloudflare API schemas, and source-vendor export docs before generating exact configuration. Workflow Identify the source stack: Zscaler ZIA, Zscaler ZPA, Palo Alto NGFW/Prisma/GlobalProtect, legacy VPN/SWG/SD-WAN, or other. Request exports and logs before mapping. Prefer structured exports over screenshots or prose summaries. Build an inventory: identities, groups, apps, destinations, connectors/tunnels, DNS/URL/firewall/DLP/TLS policies, objects/lists, locations/sites, exceptions, hit counts, and compliance logging. Produce a mapping plan: source object, Cloudflare One target resource, confidence, prerequisites, unsupported/partial mappings, and manual decisions. Create dependencies first: identity/ SCIM , connectors/on-ramps, routes/DNS, lists/objects, TLS bypasses, Access apps/policies, Gateway policies, DLP/CASB, logging. Stage safely: use a migration prefix, create disabled/audit-mode rules by default, pilot with small groups/sites, compare logs, then expand rollout. Account for every source rule. Each rule must map to a Cloudflare object or an explicit Not Migrated row with reason and security impact. Exports To Ask For ZIA: URL filtering, firewall filtering, SSL inspection, DLP, custom URL categories, IP groups, network services/service groups, users/groups/departments, locations, GRE tunnels, and static IPs. ZPA: app segments, segment groups, server groups, app connectors/connector groups, access policies, IdP/group mapping, private DNS domains, ports, and protocols. Palo Alto/Prisma: security/NAT/decryption rules, address/service objects and groups, URL categories, HIP profiles, GlobalProtect config, Prisma Access remote network/service connection config, zones, tags, logs, and hit counts. Show more Installs 524 Repository cloudflare/skills GitHub Stars 1.8K First Seen 3 days ago Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Warn