AzPolicyAdvertizer

last sync: 2021-Sep-24 16:09:49 UTC

Azure Policy definition

Web Application Firewall (WAF) should use the specified mode for Application Gateway

Name Web Application Firewall (WAF) should use the specified mode for Application Gateway
Azure Portal
Id 12430be1-6cc8-4527-a9a8-e3d38f250096
Version 1.0.0
details on versioning
Category Network
Microsoft docs
Description Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Application Gateway.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Audit
Allowed: (Audit, Deny, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-07-08 14:28:08 add 12430be1-6cc8-4527-a9a8-e3d38f250096
Used in Initiatives
Initiative DisplayName Initiative Id Initiative Category State
[Preview]: CMMC Level 3 b5629c75-5c77-4422-87b9-2509e680f8de Regulatory Compliance Preview
New Zealand ISM Restricted d1a462af-7e6d-4901-98ac-61570b4ed22a Regulatory Compliance GA
JSON 
{
  "displayName": "Web Application Firewall (WAF) should use the specified mode for Application Gateway",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Application Gateway.",
  "metadata": {
    "version": "1.0.0",
    "category": "Network"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "Audit",
        "Deny",
        "Disabled"
      ],
      "defaultValue": "Audit"
    },
    "modeRequirement": {
      "type": "String",
      "metadata": {
        "displayName": "Mode Requirement",
        "description": "Mode required for all WAF policies"
      },
      "allowedValues": [
        "Prevention",
        "Detection"
      ],
      "defaultValue": "Detection"
    }
  },
  "policyRule": {
    "if": {
      "allOf": [
        {
          "field": "type",
          "equals": "Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies"
        },
        {
          "field": "Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode",
          "notEquals": "[parameters('modeRequirement')]"
        }
      ]
    },
    "then": {
      "effect": "[parameters('effect')]"
    }
  }
}