last sync: 2020-Aug-05 13:05:29 UTC

Azure Policy

Web Application Firewall (WAF) should use the specified mode for Application Gateway

Policy DisplayName Web Application Firewall (WAF) should use the specified mode for Application Gateway
Policy Id 12430be1-6cc8-4527-a9a8-e3d38f250096
Policy Category Network
Policy Description Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Application Gateway.
Policy Mode Indexed
Policy Type BuiltIn
Policy in Preview FALSE
Policy Deprecated FALSE
Policy Effect Default: Audit
Allowed: (Audit,Deny,Disabled)
Roles used none
Policy Changes
Date/Time (UTC ymd) (i) Change Change detail
2020-07-08 14:28:08 add: Policy 12430be1-6cc8-4527-a9a8-e3d38f250096
Used in Policy Initiative(s) none
Policy Rule
{
  "properties": {
    "displayName": "Web Application Firewall (WAF) should use the specified mode for Application Gateway",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Mandates the use of 'Detection' or 'Prevention' mode to be active on all Web Application Firewall policies for Application Gateway.",
    "metadata": {
      "version": "1.0.0",
      "category": "Network"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "defaultValue": "Audit"
      },
      "modeRequirement": {
        "type": "String",
        "metadata": {
          "displayName": "Mode Requirement",
          "description": "Mode required for all WAF policies"
        },
        "allowedValues": [
          "Prevention",
          "Detection"
        ],
        "defaultValue": "Detection"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies"
          },
          {
            "field": "Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode",
          "notEquals": "[parameters('modeRequirement')]"
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "12430be1-6cc8-4527-a9a8-e3d38f250096"
}