azure-web-application-firewall

Azure WAF policies are configured by defining managed rule sets and custom rules, then associating them with Front Door or Application Gateway. This Skill applies best practices for policy design, rate limiting, and bot protection to secure cloud-hosted web apps.

The best way to deploy Azure WAF configurations is using infrastructure as code tools like Bicep, ARM, or Terraform. This ensures scalable, repeatable, and secure policy deployments across Front Door and Application Gateway environments.

Yes, you can use Azure WAF to protect APIM or OpenAI endpoints via Front Door. This Skill provides architecture patterns and policy configurations specifically designed to secure these endpoints from common web threats and bot attacks.

Tuning Azure WAF CRS and DRS rules involves configuring exclusions, adjusting rule group overrides, and analyzing logging integrations. This Skill helps validate WAF policies to reduce false positives while maintaining protection against threats.

You need either Azure Front Door or Application Gateway to attach WAF policies. This Skill details how to implement WAF across both platforms, covering geo filters, rate limits, and bot protection tailored to your specific cloud architecture.

Migrating from legacy WAF configs to policies often fails due to misconfigured rule sets or missing dependencies. This Skill provides troubleshooting and best practices for successfully transitioning legacy configurations to modern Azure WAF policies.