liveBook · Manning

Azure Front Door

As explained in Azure Security

Azure Front Door is a global Azure service for accelerating, routing, and load-balancing web application traffic across regions and origins.

Azure Front Door is a global layer-7 load-balancing service for multiregional or multicloud web applications. It routes traffic to backends inside or outside Azure and can use Azure WAF for attack protection. section 3.3.2

Detection versus Prevention

Detection monitors and logs requests matching WAF rules without blocking them. Prevention logs all requests and blocks matching incoming requests, supporting staged rollout before enforcement. section 3.3.2

How Azure Security covers it

How deep it goes
Configures WAF policies, rule sets, operating modes, and security-policy associations through Azure CLI, without detailing complete Front Door provisioning.
Examples
Uses Azure CLI commands and JSON output to create policies, add managed rules, inspect modes, and associate protection with endpoints.
What it assumes
Requires familiarity with Azure resources, Front Door profiles and endpoints, resource groups, Azure CLI, and Network Contributor permissions.
What you can do after
Operate/configure Front Door WAF protection, select Detection or Prevention, add managed rules, and associate policies with Front Door endpoints.
How it connects
Connects Azure WAF, WAF policies, Application Gateway, OWASP rule sets, bot protection, and hub-and-spoke networking.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.