Cloudflare Bundles Report

Interna & Externa bundle product breakdown

Cloudflare Interna Bundle

Interna bundles provide seat-based security services (ZTNA, SWG, CASB, DLP, RBI, Email) and bandwidth-based network services (NaaS, FWaaS). On-ramps (device agent, WARP connector, WAN connector, DNS locations, IPsec/GRE tunnels, public hostnames, API integrations) are included at no extra cost.

Essentials

Tier 1

Seat-Based Services

  • ZTNA (Access)
  • SWG (Gateway)
  • CASB
  • DLP
  • Digital Experience Monitoring (DEX)

Bandwidth-Based Services

  • NaaS (Magic WAN)
  • FWaaS (Advanced Magic Firewall)
  • Network Interconnect (separate request)

Included Allotment

  • 1 Mbps per seat purchased
  • Load Balancing not included

Advantage

Tier 2

Everything in Essentials, plus

  • Core Email Security (Email Security Advantage)
  • RBI (Browser Isolation)
  • Load Balancing
  • Sandbox

Included Allotment

  • 2 Mbps per seat purchased
  • 2 Endpoints included (sharable with Externa)

Premier

Tier 3

Everything in Advantage, plus

  • Full Email Security (Email Security Enterprise)
  • MDR for Email Security (PhishGuard)
  • Smart Routing (Argo for Magic WAN, requires CNI)

Included Allotment

  • 3 Mbps per seat purchased
  • 2 Endpoints included (sharable with Externa)

Available Add-ons (All Tiers)

  • Gateway Dedicated Egress IPs
  • Gateway DNS Resolver IPv4
  • China Network Add-ons for Zero Trust & Magic WAN
  • BYOIP (for Gateway)
  • Log Explorer

Cloudflare Externa Bundle

Externa bundles protect and accelerate external-facing web properties. All Externa tiers include 50 seats of Interna Essentials (with 50 Mbps for WAN) at no additional cost.

Essentials

Tier 1

Included Services

  • CDN
  • Advanced DDoS
  • Web Attack Detection (WAF)
  • Foundation DNS
  • Advanced Certificates Manager
  • Turnstile: Managed Challenge
  • Argo
  • Logpush

Included Allotment

  • 1 TB data transfer
  • 50 MM HTTP Requests
  • 1 Primary Domain
  • 1 Advanced Certificate Manager Domain
  • 50 seats Interna Essentials (50 Mbps WAN)

Advantage

Tier 2

Everything in Essentials, plus

  • Advanced Rate Limiting
  • Content Scanning
  • Bot Management
  • API Shield
  • Client-Side Security Advanced (Page Shield)
  • Load Balancing

Additional Included

  • 2 Endpoints
  • 50 seats Interna Essentials (50 Mbps WAN)

Premier

Tier 3

Everything in Advantage, plus

  • Magic Transit: Always On GRE
  • Magic Transit Egress
  • Advanced Magic Firewall
  • Argo for Packets

Additional Included

  • 10 IP Prefixes
  • 100 Mbps for Magic Transit
  • 50 seats Interna Essentials (50 Mbps WAN)

Pricing Meters by Tier

Tier Meters
Essentials TB, MM Requests
Advantage TB, MM Requests, Endpoints/Origins
Premier TB, MM Requests, Endpoints/Origins, IP Prefixes, Mbps (Magic Transit)