AZ496536 - Generally Available: Azure WAF integration in Microsoft Security Copilot

Azure Updates

Discussionpowered by zap.ms

Published

Jun 20, 2025

Status

Launched

Timeline

  • June 2025
    General Availability

Product

Application Gateway
Azure Front Door
Microsoft Copilot for Security
Web Application Firewall

Tag

Features
Security

Category

Networking
Security
AI + machine learning

Description

Azure Web Application Firewall (WAF) integration in Microsoft Copilot for Security has reached general availability. This integration supports both Azure Front Door WAF and Azure Application Gateway WAF.  


By integrating Azure WAF with the Security Copilot, organizations can streamline security operations, and accelerate investigations, helping security teams stay ahead of increasingly sophisticated threats.  


Key Features Available in GA  

  • SQL Injection (SQLi) Attack Analysis  
    • Generate summaries of SQLi attacks, explaining why Azure WAF blocks them.  
    • Analyze WAF diagnostic logs and track attack patterns over time.  
  • Cross-Site Scripting (XSS) Attack Analysis  
    • Summarize attack patterns and enforcement mechanisms used by Azure WAF.  
    • Correlate logs across different events to highlight emerging threats.  
  • Top Offending IP Analysis  
    • Identify the most malicious IPs within the environment.  
    • Review WAF rules triggered by these IPs to refine security policies.  
  • Top Azure WAF Rules Analysis  
    • Retrieve contextual details about frequently triggered WAF rules.  
    • Optimize security response strategies based on real-time analytics.  

Learn more.