Detections
Analytics

Ensure Azure Web Application Firewall Policy is enabled

MEDIUM

Description

Azure Web Application Firewall Policy is disabled. This may leave applications open to security threats.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Web Application Firewall policies.
  2. Select the WAF policy that you wish to edit.
  3. Under Settings, select Policy Settings.
  4. Set Inspect request body to On.

In Terraform -

  1. In the azurerm_web_application_firewall_policy, set policy_settings.enabled to true.

References:
https://learn.microsoft.com/en-us/azure/web-application-firewall/
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/web_application_firewall_policy#policy_settings

Policy Details

Rule Reference ID: AC_AZURE_0351
CSP: Azure
Remediation Available: Yes
Domain: Infrastructure Security
Resource: azurerm_web_application_firewall_policy
Resource Category: Virtual Network
Resource Type: Security Group

Frameworks