Blog Post

Azure Network Security Blog
3 MIN READ

Enhancements to Azure WAF now in General Availability

gusmodena's avatar
gusmodena
Icon for Microsoft rankMicrosoft
May 09, 2022
Regional WAF (Integrated with Azure Application Gateway)    We are excited to share that on May 3rd Microsoft announced the general availability of the managed rule set OWASP 3.2, also known as C...
Updated May 09, 2022
Version 4.0
azure application gateway
azure front door
azure network security
azure waf
shteve's avatar
shteve
Copper Contributor
Jan 12, 2023

There seems to be an issue with rule 942230 where the SQL keyword "having" is being detected within a word eg shavington is blocked. The original OWASP implementation of the regex ensures there is a non-alpha before/ after the word but the MS implementation doesn't.