Limit of WAF Exclusion

Copper Contributor

Hi, @camilamartins  @tobiotolorin, All, 

 

Based on the Link, https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-... there is a limit of 40 exclusions per Application Gateway. But does it apply to the URI-based WAF policy as well? To explain more, we've 10+ applications Passing via application Gateway. The idea is to have a separate WAF policy for each application with Fine-tuning. We expect at least 10+ in each WAF policy (Applied at URI) does it add up to the application gateway, or if the limit applies to the policy set at the application gateway level?

 

Appreciate your inputs ! 

2 Replies

For anyone looking for the answer, 40 Exclusion includes URI as well. 

"Need more exclusion lists than 40 for Application Gateway WAF" feature asked. please go vote : https://feedback.azure.com/d365community/idea/5d9498c0-539a-ec11-a81c-000d3adfb8f5