What is Azure Web Application Firewall?

Web Application Firewall (WAF) provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.

Preventing such attacks in application code is challenging. It can require rigorous maintenance, patching, and monitoring at multiple layers of the application topology. A centralized web application firewall helps make security management much simpler. A WAF also gives application administrators better assurance of protection against threats and intrusions.

A WAF solution can react to a security threat faster by centrally patching a known vulnerability, instead of securing each individual web application.

Supported service

WAF can be deployed with Azure Application Gateway, Azure Front Door, and Azure Content Delivery Network (CDN) service from Microsoft. WAF on Azure CDN is currently under public preview. WAF has features that are customized for each specific service. For more information about WAF features for each service, see the overview for each service.

Next steps

• For more information about Web Application Firewall on Application Gateway, see Web Application Firewall on Azure Application Gateway.
• For more information about Web Application Firewall on Azure Front Door Service, see Web Application Firewall on Azure Front Door Service.
• For more information about Web Application Firewall on Azure CDN Service, see Web Application Firewall on Azure CDN Service
• To learn more about Web Application Firewall, see Learn module: Introduction to Azure Web Application Firewall.
• Learn more about Azure network security