Skip to content

Commit 1d1afd7

Browse files
committed
Front Door - Update scenarios to mention protocol blocking
1 parent 04a0763 commit 1d1afd7

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

articles/frontdoor/scenarios.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ ms.service: frontdoor
88
ms.topic: article
99
ms.tgt_pltfrm: na
1010
ms.workload: infrastructure-services
11-
ms.date: 02/07/2023
11+
ms.date: 02/13/2023
1212
ms.author: jodowns
1313
---
1414

@@ -39,6 +39,7 @@ Front Door's security capabilities help to protect your application servers from
3939
- **Managed TLS certificates:** Front Door can [issue and manage certificates](domain.md#https-for-custom-domains), ensuring that your applications are protected by strong encryption and trust.
4040
- **Custom TLS certificates:** If you need to bring your own TLS certificates, Front Door enables you to use a [managed identity to access the key vault](managed-identity.md) that contains the certificate.
4141
- **Web application firewall:** Front Door's web application firewall (WAF) provides a range of security capabilities to your application. [Managed rule sets](../web-application-firewall/afds/waf-front-door-drs.md) scan incoming requests for suspicious content. [Bot protection rules](../web-application-firewall/afds/afds-overview.md#bot-protection-rule-set) identify and respond to traffic from bots. [Geo-filtering](../web-application-firewall/afds/waf-front-door-geo-filtering.md) and [rate limiting](../web-application-firewall/afds/waf-front-door-rate-limit.md) features protect your application servers from unexpected traffic.
42+
- **Protocol blocking:** Front Door only accepts traffic on the HTTP and HTTPS protocols, and will only process valid requests with a known `Host` header. Because of this behavior, your application is protected against many types of attacks across a range of protocols.
4243
- **DDoS protection:** Because of Front Door's architecture, it can also absorb large [distributed denial of service (DDoS) attacks](front-door-ddos.md) and prevent the traffic from reaching your application.
4344
- **Private Link origins:** [Private Link integration](private-link.md) helps you to protect your backend applications, ensuring that traffic can only reach your application by passing through Front Door and its security protections.
4445

0 commit comments

Comments
 (0)