Share via

Preview OWASP ModSecurity Core Rule Set 3.2 for Azure Web Application Firewall

Helio A. de Oliveira 1 Reputation point
2022-04-13T19:10:24.183+00:00

There is a public preview of OWASP ModSecurity Core Rule Set 3.2 for Azure Web Application Firewall since July 2021.
I´m wondering when it will be an official offer for Azure customers, once it has important improvements that could be usefull for us.
We´re experiencing issues with the current version and in QA we could see good results using 3.2 preview version.

Azure Web Application Firewall

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. ChaitanyaNaykodi-MSFT 24,681 Reputation points Microsoft Employee
    2022-04-13T23:16:21.91+00:00

    Hello @Helio A. de Oliveira , I got a response back from the team. The OWASP ModSecurity Core Rule Set 3.2 for Azure Web Application Firewall is currently planned to go GA by end of this quarter (June 2022).

    Hope this helps!

    ----------

    ​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments
  2. Helio A. de Oliveira 1 Reputation point
    2022-04-22T15:34:12.75+00:00

    Thank you Chaitanya!
    On the point of view of answering my question, I´m happy to know that there is a date to promote to GA soon.
    But now I have a ticket escalated with Microsoft regarding a situation where the current WAF/OWASP version is impacting my production. We conducted tests with 3.0, 3.1 and 3.2 versions and the problem is solved only with 3.2. But, once it´s in preview, I can´t adopt it in Production environment.
    Should be great if it could be promoted to GA now. Do you have an idea why it´s still in preview, since July 2021?

    0 comments