How to exclude an URL in Exclution list WAF

Question

Hello,

• I need to exclude a certain URL from being check by Azure WAF.
• Example: I have a URL (https://abc.com/pages/login), i want to exclude all URL contain "pages/login" from being checked by WAF.
• Refer to Microsoft document (https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-configuration?tabs=portal) we can do it but when i open my Azure WAF, i can't see option to do. Anyone can help me to do.

Answer 1

@Thang Trinh

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to configure Web Application Firewall exclusion lists

These configurations are available to App Gateway WAF SKU with WAF Policy attached to it.

They may not be available for legacy WAF configuration.

Refer : Upgrade to Azure Application Gateway WAF policy

This is also documented in the wiki you have shared.

Please make sure you are using WAF Policy and then try to add the exclusion you'd like.

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.