Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: Priority of WAF ruleHello CyberSec At this time, the request will further be processed by the Managed rules, after the custom rules is completed. However, the new WAF engine in detection mode is being updated to behave like prevention mode, hence no further inspection by managed rules. The release date is tentative at this time
Recent Blog ArticlesMost RecentMost LikesMalware Detection in Sentinel for Azure Firewall Malware can have various negative impacts, such as stealing sensitive data, encrypting, or deleting files, displaying unwanted ads, slowing down performance, or even taking control of the device....Azure WAF tuning with AD B2C applications Azure Active Directory B2C (Azure AD B2C) provides business-to-customer identity as a service to get single sign-on access to your applications and APIs. This provides an authorization layer for appl...Re: Azure WAF Tuning for Web Applications pratik585Hello, You can utilize the logs to obtain the match value and signature rule ID, then look up the Signature glossary and identify the rule group/rule set in the documentation.For addition...Azure WAF Tuning for Web Applications False positives occur when a Web Application Firewall (WAF) erroneously detects legitimate web traffic as malicious and subsequently denies access. For instance, an HTTP request that poses no threat ...Public Preview: Support for DRS and Mask sensitive data on Application Gateway WAF Announcement: Support for Default Rule Set in Application Gateway WAF and Ability to mask sensitive fields in WAF logs now available in Public Preview Azure Web Application Firewall- Bot Manager Scenarios Granting bots access to websites is crucial for web applications as bots can be categorized as good (search engines, content fetchers, automated response services), bad (spam bots, scrapers, brute fo...Re: Introducing the Application Gateway WAF Triage Workbook Danilo_SanchezIf you utilize App Gateway on the stable release CRS3.2, you may want to look intocoreruleset/rules at v3.3 Re: Introducing the Application Gateway WAF Triage Workbook Danilo_SanchezThank you for the feedback Danillo. I confirmed the first issue. The link to triage to the regular CRS rules (e.g.REQUEST-920-PROTOCOL-ENFORCEMENT.conf ) work but the bot rules are fa...Re: Introducing the Application Gateway WAF Triage Workbook YanaSmithThank you for this feedback. We are looking into this issue. Protect Applications in Google Cloud Platform (GCP) using Azure WAF This blog provides the steps to validate the deployment of a sample coffeeshop application in GCP and how to apply Azure WAF to implement security controls for access to the application. The Coffeesh...
MicrosoftMicrosoftMicrosoftMicrosoft
