Skip to content

Commit 4c07876

Browse files
committed
add screenshot and note
1 parent 539a0a1 commit 4c07876

File tree

3 files changed

+8
-2
lines changed

3 files changed

+8
-2
lines changed

articles/web-application-firewall/afds/waf-front-door-captcha.md renamed to articles/web-application-firewall/afds/captcha-challenge.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,15 @@ Incorporating CAPTCHA into Azure WAF not only enhances security but also minimiz
2424

2525
When the CAPTCHA challenge is active on Azure WAF, any client's HTTP(s) request matches a specific rule prompts an interactive Microsoft CAPTCHA page. This challenge requires user participation to verify they're human before their request is validated by Azure WAF. Upon successful completion, WAF recognizes the request as originating from a legitimate user, and proceeds with standard rule processing. Requests that fail to complete the challenge are blocked, thus preventing automated bots from accessing protected resources.
2626

27+
:::image type="content" source="../media/captcha-challenge/browser-captcha.png" alt-text="Web Application Firewall CAPTCHA in the browser." lightbox="../media/captcha-challenge/browser-captcha.png":::
28+
29+
2730
## Expiration
2831

29-
The WAF **Policy settings** define the CAPTCHA challenge cookie validity lifetime in minutes, determining how long a user remains validated before facing a new challenge. Once the lifetime expires, the user must complete the CAPTCHA challenge again to verify their identity. The lifetime is configurable between 5 and 1,440 minutes, with a default setting of 30 minutes.
32+
The WAF **Policy settings** define the CAPTCHA challenge cookie validity lifetime in minutes, determining how long a user remains validated before facing a new challenge. Once the lifetime expires, the user must complete the CAPTCHA challenge again to verify their identity. The lifetime is configurable between 5 and 1,440 minutes, with a default setting of 30 minutes. The CAPTCHA challenge cookie name is `afd_azwaf_captcha` on Azure Front Door.
3033

31-
The CAPTCHA challenge cookie name is **afd_azwaf_captcha** on Azure Front Door.
34+
> [!NOTE]
35+
> The CAPTCHA challenge expiration cookie is injected into the user’s browser after successfully completing the challenge.
3236
3337
## Limitations
3438

8.23 KB
Loading

articles/web-application-firewall/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -184,6 +184,8 @@ items:
184184
href: waf-copilot.md
185185
- name: JavaScript challenge
186186
href: waf-javascript-challenge.md
187+
- name: CAPTCHA challenge
188+
href: ./afds/captcha-challenge.md
187189
- name: Operational excellence
188190
items:
189191
- name: Application Gateway

0 commit comments

Comments
 (0)