We are announcing the private preview of profile and route-based Web Application Firewall (WAF) policies on Azure Front Door. Previously, to protect your applications from malicious attacks, a WAF policy had to be linked to a Front Door via one or more Front Door frontends or custom domains. With the release of this feature, the association can now happen at two additional levels: the top-level Front Door profile level and the bottom route level.
This feature allows you to have a global profile level policy that can be generally applied to all domains within a profile through the Front Door profile level association. Furthermore, you can also apply a more finely tuned WAF policy to a specific route within a domain like a login page, or a payment page, that’s likely to have different security requirements. A more specific policy overrides a less specific policy. For example, a route-level policy overrides a domain-level policy and domain-level policy overrides a profile-level policy.
If you’re interested in participating in this private preview, please fill out this sign-up form and our team will reach out after onboarding you.