Azure WAF and False Positives

This post will explain how to override false positives in the (network) Azure Web Application Firewall (WAF), without compromising security, using one of four methods in combination with a tiered WAF Policy architecture:

Managed Rulesets

Custom Rules

Exclusions

Disabled rules

False Positives

A WAF is a rather simple solution,…

28/06/2023 Article Bloggers Aidan Finn

Share:

You may be interested in

Azure Firewall Basic – For Small/Medium Business & “Branch”
Microsoft has just announced a lower cost SKU of Azure Firewall, Basic, that is aimed at small/medium business but could also play a role in “branch office” deployments in Microsoft…
04/10/2022
Terrafying Azure – A Tale From The Dark Side
This post is a part of the Azure Back to School 2023 online event. In this post, I will discuss using Microsoft Azure Export for Terraform, also known as Aztfexport…
19/09/2023
Why Are There So Many Default Routes In Azure?
Have you wondered why an Azure subnet with no route table has so many default routes? What the heck is 25.176.0.0/13? Or What is 198.18.0.0/15? And why are they routing…
20/05/2024
Azure Infrastructure Announcements – July 2023
Many people in Europe take the month of July off for vacation so they would have missed out on an unusually busy few weeks of announcements for Microsoft. This post…
30/08/2023
Script – Document All Azure Private DNS Zones
I found myself in a situation where I needed to document a lot of Azure Private DNS Zones. I needed the following information: Name of the zone Subscription name Resource…
30/04/2024
The Azure IaaS Book Of News – December 2022
Here’s all the news that I thought was interesting for Ops and Security folks working with Azure IaaS from December 2022. Azure VMware Solution Azure VMware Solution Advanced Monitoring: This…
05/01/2023
SignalR Disconnects On Azure Application Gateway
I will explain a recent situation where an application that uses SignalR/WebSockets disconnected when routed through the Azure Application Gateway during listener configuration changes. Background Me and my team are…
01/02/2023
Your Azure Migration Project Is Doomed To Fail
That heading is a positive way to get your holiday spirit going, eh? I’m afraid I’m going to be your Festive Tech Calendar 2022 Grinch and rain doom and gloom…
03/12/2022
Azure & Oracle Cloud Interconnect
This post will explain how you can connect your Azure network(s) with Oracle Cloud Infrastructure (OCI) via the Oracle Cloud Interconnect. Background Many mid-large organisations run applications that are based…
19/02/2024
Designing Network Security To Combat Modern Threats
In this post, I want to discuss how one should design network security in Microsoft Azure, dispensing with past patterns and combatting threats that are crippling businesses today. The Past…
07/03/2024
Cannot Remove Subnet Because of App Service VNet Integration
Here I will describe how you can deal with an issue where you cannot delete a subnet from a VNet after deleting an Azure App Service or Function App with…
13/02/2023
Checking If Client Has Access To KeyVault With Private Endpoint
In this post, I’ll explain how to check if a client service, such as an App Service, has access to an Azure Key Vault with Private Endpoint. Private Endpoint In…
08/05/2023