Announcing the general availability of profile and route
level policies for Azure Web Application Firewall (WAF) on Azure Front Door
Premium. WAF policies are no longer limited to individual domains: you can now
apply broad baseline protection across an entire Azure Front Door profile and
use targeted policies for the routes that need different controls.
You can associate a WAF policy at the profile, domain, or
route scope. For example, use a profile level policy for common protections
across every domain in a profile, then apply a route level policy to sensitive
paths such as sign-in, checkout, or API routes. This reduces policy duplication
for teams that run many applications behind a single Azure Front Door profile,
while keeping granular controls where they're needed.
When more than one scope applies to a request, Azure Front
Door uses the most specific policy: a route level policy takes precedence over
a domain level policy, and a domain level policy takes precedence over a
profile level policy. Existing domain level associations continue to work
without any changes.
Learn
more.