Azure Front Door is a global layer-7 load-balancing service for multiregional or multicloud web applications. It routes traffic to backends inside or outside Azure and can use Azure WAF for attack protection. section 3.3.2
Detection versus Prevention
Detection monitors and logs requests matching WAF rules without blocking them. Prevention logs all requests and blocks matching incoming requests, supporting staged rollout before enforcement. section 3.3.2
