Azure Web Application Firewall
An Azure service that provides protection for web apps.
333 questions
Azure WAF Training
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 53%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Steven
0
Reputation points
I have been working with a user who continually gets locked out of their acct, they state they have a script running thats "training the WAF" I was under the impression that a WAF is policy based and cant be trained like you would train an AI. Any idea what they may be talking about?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT 26,551 Reputation points Microsoft Employee2024-11-27T02:37:34.8533333+00:00 Thank you for reaching out.
Yes we do not use "training the WAF" but "tuning the WAF" terminology is used. WAF is tuned to prevent any false positive blocks more details can be found below.
https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/best-practices#tune-your-waf
We do have Azure Web Application Firewall integration in Microsoft Copilot for Security (preview) feature but there is no training concept used there, but it might be worth a look.
https://learn.microsoft.com/en-us/azure/web-application-firewall/waf-copilotHope this helps! Thanks!
Sign in to comment
Sign in to answer