manage-firewall

Inspects and configures the web application firewall for Power Pages production sites.

808|167|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/microsoft/power-platform-skills --skill manage-firewall
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: manage-firewall
Source: https://github.com/microsoft/power-platform-skills/tree/main/plugins/power-pages/skills/manage-firewall
Command: npx skills add https://github.com/microsoft/power-platform-skills --skill manage-firewall

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Power Pages production sites need protection against bots, brute-force attacks, and unwanted traffic, but configuring the web application firewall (WAF) requires navigating portal identifiers, eligibility rules, rule priorities, and regional availability. This Skill inspects the current firewall state and walks you through enabling protection and managing custom rules in plain language.

Core Features & Use Cases

  • Firewall State Inspection: Checks whether the WAF is enabled and lists existing custom and managed rules, handling eligibility and region restrictions automatically.
  • Rule Management: Adds, updates, or removes custom rules for IP blocks, country blocks, path restrictions, and rate limiting, with validation for priority conflicts, overlaps, and contradictions before applying changes.
  • Review Mode: Captures firewall status and rules into JSON findings for a consolidated security review without making any changes.
  • Use Case: A site owner asks "is my login page protected against brute-force attacks?" The Skill checks the firewall state, recommends a rate-limit rule for the login path, validates it against existing rules, and applies it after user approval.

Quick Start

Ask the assistant to check whether my Power Pages site firewall is enabled and add a rate limit to the login page.

Frequently Asked Questions about manage-firewall

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enable the firewall on a Power Pages site?

Run the manage-firewall skill, which checks site eligibility and then executes the enable script against the Power Platform API. The operation is asynchronous and polls until the firewall status reaches the active state, typically within a 15-minute timeout.

How do I add a rate limit to a Power Pages login page?

Ask the skill to protect the login page, and it builds a rate-limit custom rule targeting that path with a threshold and duration. The rule is validated against existing rules for priority conflicts before being applied through the set-rules script.

Does the Power Pages firewall work on trial or non-production sites?

No, the web application firewall is only available on production sites in supported regions. The skill detects ineligible sites during prerequisite checks and explains the limitation instead of attempting changes.

Why does the firewall status show Created instead of Enabled?

The Power Platform API uses Created as the only state meaning the firewall is actively filtering requests. Any other value such as Disabled, None, Enabling, or Failed means no active policy exists, and rule queries must be skipped.

How long do Power Pages firewall rule changes take to apply?

Custom rule changes can take up to one hour to propagate to all edge locations worldwide. Enabling or disabling the firewall itself is polled by the scripts until the target state is reached or the operation times out.