Commercial software intelligenceEvidence checked · 8 September 2026
SkuTrace

Commercial product change, preserved as evidence.

SK-2026-156 · Editions, packaging & bundles

Cloudflare adds browser-based RDP file-transfer controls in beta across Zero Trust plans

Cloudflare Access added beta file-transfer controls for browser-based RDP on 7 July 2026, allowing administrators to separately permit or block uploads and downloads; the feature is available on all Zero Trust plans and file transfer remains denied unless explicitly configured.

Beta available on all Zero Trust plans

Commercial transition

Previous stateBrowser-based RDP sessions did not expose the new directional Cloudflare Access policy controls for transferring files between the local device and remote Windows server.
→
New stateAdministrators can configure upload and download permissions separately for browser-based RDP. New policies deny file transfer by default, and existing browser-based RDP applications remain denied until transfer is explicitly configured.

Who is affected

Cloudflare Zero Trust customers using browser-based RDP, including organizations that need to restrict data movement for unmanaged devices, BYOD users or third-party contractors.

Action required

Review browser-based RDP Access policies and explicitly enable only the upload or download directions that are required; otherwise retain the default-deny posture and test the resulting remote-session workflow.

Evidence boundary

The capability is beta and available on all Zero Trust plans. It does not automatically enable file transfer, does not establish general availability, and does not imply equivalent controls for every RDP mode or unrelated Cloudflare Access application type.

Timeline

  1. Browser RDP file-transfer controls entered beta

    Cloudflare added separate upload and download policy controls for browser-based RDP and documented default-deny behaviour.

Official sources