Azure Web Application Firewall
An Azure service that provides protection for web apps.
296 questions
web application firewall log on exluded request
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 20%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKS%3C/text%3E%3C/svg%3E)
Kit Shing Kwong
0
Reputation points
Hi,
Let's say we have an application gateway attached to a WAF policy and Diagnostic settings enabled. I have made some exclusions in the WAF policy. Is there anyway I can find the log for the requests that are excluded by the WAF policy exclusion?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT 24,656 Reputation points Microsoft Employee2023-08-25T00:43:00.37+00:00 Thank you for reaching out.
I have reached out to the team internally regarding this issue and will make an update here as soon as I get a response. Thank you!
-
ChaitanyaNaykodi-MSFT 24,656 Reputation points Microsoft Employee
2023-09-08T06:22:57.98+00:00 Apologies for the delayed response here. Currently WAF only log the following values Blocked and Allowed (for custom rules), Matched (when a rule matches a part of the request), and Detected and Blocked (these are both for mandatory rules, depending on if the WAF is in detection or prevention mode). Excluded requests are not logged as they are applied when false-positive request is blocked by WAF.
It will help us if you could share your use case in this scenario? Thank you!
Sign in to comment