本文へ移動
cccskills
無料GitHub で公開

azure-web-application-firewall

Expert knowledge for Azure Web Application Firewall development including best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring Front Door/App Gateway WAF rules, geo/bot filters, rate limits, Sentinel logging, or APIM/Azure OpenAI protection, and other Azure Web Application Firewall related development tasks. Not for Azure Application Gateway (use azure-application-gateway), Azure Front Door (use azure-front-door), Azure Firewall (use azure-firewall), Azure Firewall Manager (use azure-firewall-manager).

MicrosoftDocs/Agent-Skills
インストール方法を見る

含まれるファイル（1）

  • SKILL.md12.4 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Azure Web Application Firewall Skill

This skill provides expert guidance for Azure Web Application Firewall. Covers best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
Best PracticesL35-L42Best practices for configuring and tuning WAF on Azure Front Door and Application Gateway, including rule tuning, reducing false positives, and using geomatch rules for stronger security.
Decision MakingL43-L48Guidance on planning and migrating from legacy WAF configs to full WAF policies, and managing the lifecycle, upgrades, and versions of Azure WAF managed rule sets.
Limits & QuotasL49-L54WAF limits on rules, file sizes, and concurrent requests, plus how to configure request body and upload size thresholds for Application Gateway WAF.
SecurityL55-L71Configuring Azure WAF/Front Door/App Gateway security: IP/geo rules, default/CRS/DRS rule sets, exclusions/exceptions, log scrubbing for sensitive data, governance, and securing Azure OpenAI APIs.
ConfigurationL72-L101Configuring Azure WAF (Front Door & App Gateway): custom/managed rules, geo/ASN/bot/JA4 filters, rate limiting, exclusions, logging/metrics, custom responses, policy settings, and central management.
Integrations & Coding PatternsL102-L111Using WAF with other Azure services: integrating logs with Sentinel/Log Analytics, automating incident response, investigating events, and protecting APIM/Azure OpenAI via Front Door WAF.
DeploymentL112-L117How to deploy and manage Application Gateway WAF v2 using Bicep, ARM templates, Terraform, and upgrade existing WAF configurations to WAF policies.

Best Practices

TopicURL
Implement WAF best practices in Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-best-practices
Tune Azure Front Door WAF rules and reduce false positiveshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-tuning
Apply best practices for WAF on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/best-practices
Apply geomatch WAF rules to strengthen web app securityhttps://learn.microsoft.com/en-us/azure/web-application-firewall/geomatch-custom-rules-examples

Decision Making

TopicURL
Migrate Azure Application Gateway WAF configs to full policieshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/migrate-policy
Plan Azure WAF managed ruleset lifecycle and upgradeshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ruleset-support-policy

Limits & Quotas

TopicURL
Understand Azure WAF on Application Gateway limitshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-faq
Configure WAF request and upload size limitshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-request-size-limits

Security

TopicURL
Secure Azure OpenAI APIs with Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/protect-azure-open-ai
Configure IP restriction rules in Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-ip-restriction
Use Azure Front Door WAF Default Rule Sethttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-drs
Configure WAF exclusion lists for Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion
Configure Front Door WAF log scrubbing ruleshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-sensitive-data-protection-configure-frontdoor
Sensitive data protection with Front Door WAF log scrubbinghttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-sensitive-data-protection-frontdoor
Configure Azure WAF CRS and DRS rule groupshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
Configure WAF exception lists for Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-exceptions
Configure IPv6 geo-based WAF custom rules on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/custom-rules-geo-based-ipv6
Use WAF log scrubbing for sensitive data protectionhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/waf-sensitive-data-protection
Configure WAF log scrubbing to mask sensitive datahttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/waf-sensitive-data-protection-configure
Harden Azure WAF with security configurationshttps://learn.microsoft.com/en-us/azure/web-application-firewall/secure-web-application-firewall
Enforce WAF governance using Azure Policyhttps://learn.microsoft.com/en-us/azure/web-application-firewall/shared/waf-azure-policy

Configuration

TopicURL
Use ASN match conditions in Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/asn-match-condition
Configure CAPTCHA challenges in Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/captcha-challenge
Configure client fingerprint (JA4) matching in WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/client-fingerprint-match-condition
Configure WAF exception lists for Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/front-door-exceptions
Configure custom WAF responses in Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-custom-response-code
Configure custom WAF rules for Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-custom-rules
Configure custom and managed WAF rules for Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-custom-rules-powershell
Set up WAF exclusion rules on Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion-configure
Configure geo-filtering rules in Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-geo-filtering
Configure monitoring and logging for Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-monitor
Enable and configure bot protection in Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-configure-bot-protection
Configure Azure Front Door WAF policy settingshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-settings
Configure rate limiting policies in Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit
Configure rate-limit rules in Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit-configure
Create a geo-filtering WAF policy with PowerShellhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-tutorial-geo-filtering
Configure WAF exclusion lists on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-configuration
Configure and analyze Application Gateway WAF metricshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-metrics
Associate WAF policies with existing Application Gatewayshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/associate-waf-policy-existing-gateway
Configure bot protection rules for Azure Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/bot-protection
Configure custom WAF response for Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/configure-custom-response-code
Create WAF v2 custom rules with Azure PowerShellhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/configure-waf-custom-rules
Use Application Gateway WAF Insights dashboardshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/insights
Create rate-limiting custom rules for Application Gateway WAF v2https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/rate-limiting-configure
Enable and manage logging for Azure WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-logs
Manage WAF policies centrally with Azure Firewall Managerhttps://learn.microsoft.com/en-us/azure/web-application-firewall/shared/manage-policies
Use JavaScript challenge for bot mitigation in WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-javascript-challenge

Integrations & Coding Patterns

TopicURL
Automate WAF incident response with Microsoft Sentinelhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/automated-detection-response-with-sentinel
Protect APIM-hosted APIs with Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/protect-api-hosted-apim-by-waf
Analyze Application Gateway WAF logs with Log Analyticshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/log-analytics
Investigate Azure WAF events with Security Copilothttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-copilot
Detect new web threats using WAF and Sentinelhttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-new-threat-detection
Integrate Azure WAF logs with Microsoft Sentinelhttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-sentinel

Deployment

TopicURL
Deploy Azure Application Gateway WAF v2 using Bicephttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/quick-create-bicep
Deploy Azure Application Gateway WAF v2 via ARM templatehttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/quick-create-template
Upgrade Azure Application Gateway WAF configuration to policyhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/upgrade-ag-waf-policy

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

ログインしてレビューを書く

同じリポジトリのスキル

概要と使いどころ

azure-active-directory-b2c

無料

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

日本語の概要は準備中です。原文の説明を表示しています。

MicrosoftDocs/Agent-Skills7772026年10月6日 更新

azure-advisor

無料

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

日本語の概要は準備中です。原文の説明を表示しています。

MicrosoftDocs/Agent-Skills7772026年10月6日 更新

azure-ai-vision

無料

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

日本語の概要は準備中です。原文の説明を表示しています。

MicrosoftDocs/Agent-Skills7772026年10月6日 更新

azure-aks-edge-essentials

無料

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc, GitOps, IoT/OPC/ONVIF, TPM/Key Vault secrets, or AI model workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

日本語の概要は準備中です。原文の説明を表示しています。

MicrosoftDocs/Agent-Skills7772026年10月6日 更新

azure-analysis-services

無料

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

日本語の概要は準備中です。原文の説明を表示しています。

MicrosoftDocs/Agent-Skills7772026年10月6日 更新

azure-anomaly-detector

無料

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomaly Detector related development tasks. Not for Azure AI Metrics Advisor (use azure-metrics-advisor), Azure Monitor (use azure-monitor), Azure Machine Learning (use azure-machine-learning).

日本語の概要は準備中です。原文の説明を表示しています。

MicrosoftDocs/Agent-Skills7772026年10月6日 更新

MicrosoftDocs のスキルをすべて見る

このスキルの問題を報告する