Azure Web Application Firewall

azure Web application firewallazure-web-application-firewall

Layer-7 rule engine protecting web applications behind Application Gateway, Front Door or CDN.

Provider: azure
Kind: Web application firewall
Category: Security
Official docs: https://learn.microsoft.com/en-us/azure/web-application-firewall/overview
Also known as: WAF

Properties · 4 set by this component

property	type	values	required	kind default	this component
anomalyScoreThreshold · component property	integer	—	no	5	inherited
anomalyScoring · component property	boolean	—	no	true	inherited
botProtection	boolean	—	no	—	▸ false
customRuleCount	integer	—	no	—	inherited
managed	boolean	—	no	false	▸ true
managedRuleSet	string	—	no	—	▸ owasp-crs
mode	enum	detection \| prevention \| off	no	—	▸ detection
platform · component property	enum	application-gateway \| application-gateway-for-containers \| front-door \| cdn	no	—	inherited
rateLimiting	boolean	—	no	—	inherited
sitesPerInstanceLimit · component property	integer	—	no	40	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "web-application-firewall", component: "azure-web-application-firewall" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf NAXSInaxsiwaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Azure Web Application Firewall: layer-7 policy running on Application Gateway, Front Door or
3# Azure CDN. "Create WAF policies for Application Gateway": a new WAF policy is in Detection mode
4# by default and the Azure-managed OWASP rules are enabled; anomaly scoring blocks at a score of 5.
5schemaVersion: "1"
6type: "component"
7id: "azure-web-application-firewall"
8kind: "waf"
9provider: "azure"
10docs: "https://learn.microsoft.com/en-us/azure/web-application-firewall/overview"
11aliases: ["WAF"]
12defaults:
13  managed: true
14  mode: "detection"
15  managedRuleSet: "owasp-crs"
16  botProtection: false
17properties:
18  platform:
19    type: "enum"
20    values: ["application-gateway", "application-gateway-for-containers", "front-door", "cdn"]
21  anomalyScoring:
22    type: "boolean"
23    default: true
24  anomalyScoreThreshold:
25    type: "integer"
26    default: 5
27  sitesPerInstanceLimit:
28    type: "integer"
29    default: 40

The same page as markdown, for an agent: /catalogue/components/azure-web-application-firewall.md