Skip to content

Commit e621c9d

Browse files
Updated the files as per the comments
Updated the files as per the comments
1 parent e03ed80 commit e621c9d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/web-application-firewall/shared/waf-azure-policy.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,9 +25,9 @@ There are several built-in Azure Policy definitions to manage WAF resources. A b
2525

2626
4. **Web Application Firewall (WAF) should use the specified mode for Application Gateway**: Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Application Gateway. The policy definition has three effects: Audit, Deny, and Disable. Audit tracks when a WAF does not fit the specified mode. Deny prevents any WAF from being created if it is not in the correct mode. Disabled turns off the policy assignment.
2727

28-
5. **Azure Application Gateway should have Resource logs enabled**: Mandates the enabling of Resource logs on all Application Gateways (Plus WAF). The policy definition has two effects: AuditIfNotExists and Disable. AuditIfNotExists tracks when an Application Gateway does not have resource logs enabled and notifies the user that the Application Gateway does not comply. Disabled turns off the policy assignment.
28+
5. **Azure Application Gateway should have Resource logs enabled**: Mandates the enabling of Resource logs and Metrics on all Application Gateways, including WAF. The policy definition has two effects: AuditIfNotExists and Disable. AuditIfNotExists tracks when an Application Gateway does not have resource logs, metrics enabled and notifies the user that the Application Gateway does not comply. Disabled turns off the policy assignment.
2929

30-
6. **Azure Front Door should have Resource logs enabled**: Mandates the enabling of Resource logs on Azure Front Door Service (Plus WAF). The policy definition has two effects: AuditIfNotExists and Disable. AuditIfNotExists tracks when a Front Door service does not have resource logs enabled and notifies the user that the service does not comply. Disabled turns off the policy assignment.
30+
6. **Azure Front Door should have Resource logs enabled**: Mandates the enabling of Resource logs and Metrics on Azure Front Door Service (Plus WAF). The policy definition has two effects: AuditIfNotExists and Disable. AuditIfNotExists tracks when a Front Door service does not have resource logs, metrics enabled and notifies the user that the service does not comply. Disabled turns off the policy assignment.
3131

3232
## Launch an Azure Policy
3333

0 commit comments

Comments
 (0)