🛡️ Azure Front Door Web Application Firewall is not enabled🟢⚪

• Contextual name: 🛡️ Front Door Web Application Firewall is not enabled🟢⚪
• ID: /ce/ca/azure/front-door/web-application-firewall
• Tags:
  • ⚪ Impossible policy
  • 🟢 Policy with categories
  • 🟢 Policy with type
• Policy Type: COMPLIANCE_POLICY
• Policy Categories: SECURITY

Stats

not available

Description

Open File

Description

Azure Web Application Firewall (WAF) on Azure Front Door inspects incoming HTTP and HTTPS requests at the Microsoft network edge and blocks common exploits before they reach the origin. Ensure every domain served by an Azure Front Door Standard or Premium profile is associated with an enabled WAF policy.

Rationale

Applications published through Azure Front Door are reachable from the internet, so injection, cross-site scripting, malicious bot, and HTTP flood traffic arrives at the edge first. A WAF policy blocks these requests before they reach the origin, and Microsoft updates its managed rule sets as new attack signatures appear.

Audit

This requirement needs manual assessment. Front Door security policies, domain associations, and WAF policy links are not collected through a verified CE relationship.

Remediation

Open File

Remediation

Azure Web Application Firewall (WAF) on Azure Front Door inspects incoming HTTP and HTTPS requests at the Microsoft network edge and blocks common exploits before they reach the origin. Ensure every domain served by an Azure Front Door Standard or Premium profile is associated with an enabled WAF policy.

Create or select an enabled WAF policy that matches the Front Door profile tier, configure the required rules, and associate it with every domain in the profile. Verify each domain association and test application traffic after applying the policy.

Automated assessment is unavailable: Front Door security policies, domain associations, and WAF policy links are not collected through a verified CE relationship.

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CIS Azure v7.0.0 → 💼 7.10 Ensure Azure Web Application Firewall (WAF) is Enabled on Azure Front Door (Automated)			1		no data
💼 Cloudaware Framework → 💼 Threat Protection			35		no data