WAF policy can be configured in two modes: It is designed to defend web services against common exploits and vulnerabilities and keep these services highly available for your users in addition to meeting compliance requirements. Azure WAF, when integrated with Front Door, stops denial-of-service and targeted application attacks at the Azure network edge, close to the attack sources before they enter your virtual network, offering protection without sacrificing performance.ДЄzure WAF provides centralized protection for web applications that are globally delivered using Azure Front Door. Azure WAF with Azure Front DoorДЄzure Web Application Firewall (WAF) is designed to protect web applications from multiple attack vectors such as injection type and volumetric DoS attacks. Note: The backend pools or Azure resource must have a public IP address or a publicly resolvable DNS hostname. The table below describes a breakdown of the current capabilities of Azure Front door: It works at the layer 7 of the OSI model (Application layer or HTTP/HTTPS layer) and uses the Anycast protocol with split TCP and MicrosoftвЂ™s global network for improving global connectivity.В One of the primary benefits of using Azure Front Door is that utilizes MicrosoftвЂ™s vast global network. To overcome the regional limitation and make these services available globally, Microsoft introduced the Azure Front Door service.В I will try to summarise this new offering and how it works when integrated with an Azure Web Application Firewall, the workflow and the security settings.ДЄzure Front Door Service enables us to define, manage, and monitor the global routing of web traffic by optimizing for best performance with instant global failover and high availability. Azure Traffic manager for instance, which works at the DNS level for cross region support, cannot perform path-based routing and the failover time is based on TTL of the DNS record. One such limitation is that they primarily exist in single regions (regional services). These network services provide solutions for applications that require high availability, security & scalability, but they also come with their own limitations. If you have been working with Azure Infrastructure services, then you would have come across Core Network offerings such as Azure Traffic manager, Azure Load balancers & Application Gateways.

Telstra big ip edge client