SkillsAdd

microsoftdocs/agent-skills

azure-web-application-firewall

Expert knowledge for Azure Web Application Firewall development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring Front Door/App Gateway WAF rules, rate limits, bot challenges, geo/IP filters, or Sentinel logging, and other Azure Web Application Firewall related development tasks. Not for Azure Application Gateway (use azure-application-gateway), Azure Front Door (use azure-f…

First seen Mar 10, 2026

Installation

$ npx skills add microsoftdocs/agent-skills --skill azure-web-application-firewall
View on skills.sh ↗ GitHub repository ↗

Summary

  • Expert knowledge for Azure Web Application Firewall development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment.
  • Use when configuring Front Door/App Gateway WAF rules, rate limits, bot challenges, geo/IP filters, or Sentinel logging, and other Azure Web Application Firewall related development tasks.
  • Not for Azure Application Gateway (use azure-application-gateway), Azure Front Door (use azure-front-door), Azure Firewall (use azure-firewall), Azure DDoS Protection (use azure-ddos-protection).

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

microsoft-foundry Shared topics
microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and …

576.5K installs
azure-prepare Shared topics
microsoft/azure-skills

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Te…

568.3K installs
azure-aigateway Shared topics
microsoft/azure-skills

Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: sem…

566.3K installs
azure-compute Shared topics
microsoft/azure-skills

Azure VM/VMSS router. WHEN: create / provision / deploy / spin-up VM, recommend VM size, compar…

510K installs
azure-hosted-copilot-sdk Shared topics
microsoft/azure-skills 440.4K installs
azure-quotas Shared topics
microsoft/azure-skills

Check/manage Azure quotas and usage across providers. For deployment planning, capacity validat…

436.1K installs

Also in this package

Other skills from microsoftdocs/agent-skills · top by installs.

npx skills add microsoftdocs/agent-skills
azure-container-apps 13 azure-sql-database 12 azure-well-architected 399 azure-architecture 325 azure-pipelines 315 azure-functions 289 azure-devops 270 azure-security 251 azure-monitor 251 azure-blob-storage 242

Browse all from microsoftdocs/agent-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 737
License LICENSE
Default branch main
Open issues 2
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

CompatibilityRequires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
More metadata
generated_at
2026-08-31
generator
docs2skills/1.0.0

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 12,233 B
  • docs SUMMARY.md 636 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 133 installs

SKILL.md

Azure Web Application Firewall Skill

This skill provides expert guidance for Azure Web Application Firewall. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use readfile with the specified lines. For categories with file links (e.g., [security.md](security.md)), use readfile on the linked reference file

IMPORTANT for Agent: If metadata.generatedat is more than 3 months old, suggest the user pull the latest version from the repository. If mcpmicrosoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcpmicrosoftdocs:microsoftdocs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category Lines Description
Troubleshooting L36-L40 Diagnosing and fixing Azure WAF issues on Front Door and Application Gateway, including rule matches, false positives, blocked requests, and configuration or logging problems.
Best Practices L41-L48 Best practices for configuring, tuning, and hardening WAF on Front Door and Application Gateway, including geomatch rules, exclusions, and security posture improvements.
Decision Making L49-L54 Guidance on planning and migrating from legacy WAF configs to full WAF policies, and managing the lifecycle, upgrades, and versions of Azure WAF managed rule sets.
Limits & Quotas L55-L59 Details on WAF limits like max request/body size, file upload constraints, rule engine behavior under high load, and how to configure or tune these limits on Application Gateway.
Security L60-L72 Configuring WAF security: IP restrictions, exclusions/exceptions, log scrubbing and masking sensitive data, hardening WAF settings, and enforcing governance with Azure Policy.
Configuration L73-L100 Configuring Azure WAF behavior: custom/managed rules, rate limiting, geo-filtering, bot/CAPTCHA/JS challenges, exclusions, responses, logging/metrics, and policy management for Front Door and App Gateway.
Integrations & Coding Patterns L101-L111 Using WAF with other Azure services: integrating logs with Sentinel/Log Analytics, automating incident response, investigating events, and protecting APIM/Azure OpenAI via Front Door WAF.
Deployment L112-L117 How to deploy and manage Application Gateway WAF v2 using Bicep, ARM templates, Terraform, and upgrade existing WAF configurations to WAF policies.

Troubleshooting

Topic URL
Troubleshoot Azure Front Door WAF behavior and rules https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-faq

Best Practices

Topic URL
Implement WAF best practices in Azure Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-best-practices
Tune Azure Front Door WAF rules and exclusions https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-tuning
Apply best practices for WAF on Application Gateway https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/best-practices
Apply geomatch WAF rules to strengthen web app security https://learn.microsoft.com/en-us/azure/web-application-firewall/geomatch-custom-rules-examples

Decision Making

Topic URL
Migrate Azure Application Gateway WAF configs to full policies https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/migrate-policy
Plan Azure WAF managed ruleset lifecycle and upgrades https://learn.microsoft.com/en-us/azure/web-application-firewall/ruleset-support-policy

Limits & Quotas

Topic URL
Configure WAF request and file upload size limits on Application Gateway https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-request-size-limits

Security

Topic URL
Configure IP restriction rules in Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-ip-restriction
Configure WAF exclusion lists for Azure Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion
Configure Front Door WAF log scrubbing rules https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-sensitive-data-protection-configure-frontdoor
Sensitive data protection with Front Door WAF log scrubbing https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-sensitive-data-protection-frontdoor
Configure WAF exception lists for Application Gateway https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-exceptions
Use WAF log scrubbing for sensitive data protection https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/waf-sensitive-data-protection
Configure WAF log scrubbing to mask sensitive data https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/waf-sensitive-data-protection-configure
Harden Azure WAF with security configurations https://learn.microsoft.com/en-us/azure/web-application-firewall/secure-web-application-firewall
Enforce WAF governance using Azure Policy https://learn.microsoft.com/en-us/azure/web-application-firewall/shared/waf-azure-policy

Configuration

Topic URL
Configure CAPTCHA challenges in Azure Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/captcha-challenge
Configure WAF exception lists for Azure Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/front-door-exceptions
Configure custom WAF responses in Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-custom-response-code
Configure custom WAF rules for Azure Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-custom-rules
Configure Azure Front Door WAF custom and managed rules https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-custom-rules-powershell
Set up WAF exclusion rules on Azure Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion-configure
Configure geo-filtering rules in Azure Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-geo-filtering
Configure monitoring and logging for Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-monitor
Enable and configure bot protection in Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-configure-bot-protection
Configure Azure Front Door WAF policy-level settings https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-settings
Configure rate limiting policies in Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit
Create and tune WAF rate-limit rules on Front Door https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit-configure
Create a geo-filtering WAF policy with PowerShell https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-tutorial-geo-filtering
Configure WAF exclusion lists on Application Gateway https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-configuration
Configure and analyze Application Gateway WAF metrics https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-metrics
Associate WAF policies with existing Application Gateways https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/associate-waf-policy-existing-gateway
Configure bot protection rules for Azure Application Gateway WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/bot-protection
Configure custom WAF response for Application Gateway https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/configure-custom-response-code
Create WAF v2 custom rules with Azure PowerShell https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/configure-waf-custom-rules
Use Application Gateway WAF Insights dashboards https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/insights
Create rate-limiting custom rules for Application Gateway WAF v2 https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/rate-limiting-configure
Enable and manage logging for Azure WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-logs
Manage WAF policies centrally with Azure Firewall Manager https://learn.microsoft.com/en-us/azure/web-application-firewall/shared/manage-policies
Use JavaScript challenge for bot mitigation in WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/waf-javascript-challenge

Integrations & Coding Patterns

Topic URL
Automate WAF incident response with Microsoft Sentinel https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/automated-detection-response-with-sentinel
Protect APIM-hosted APIs with Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/protect-api-hosted-apim-by-waf
Secure Azure OpenAI endpoints using Front Door WAF https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/protect-azure-open-ai
Analyze Application Gateway WAF logs with Log Analytics https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/log-analytics
Investigate Azure WAF events with Security Copilot https://learn.microsoft.com/en-us/azure/web-application-firewall/waf-copilot
Detect new web threats using WAF and Sentinel https://learn.microsoft.com/en-us/azure/web-application-firewall/waf-new-threat-detection
Integrate Azure WAF logs with Microsoft Sentinel https://learn.microsoft.com/en-us/azure/web-application-firewall/waf-sentinel

Deployment

Topic URL
Deploy Azure Application Gateway WAF v2 using Bicep https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/quick-create-bicep
Deploy Azure Application Gateway WAF v2 via ARM template https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/quick-create-template
Upgrade Azure Application Gateway WAF configuration to policy https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/upgrade-ag-waf-policy