Generally Available: Azure WAF integration in Microsoft Security Copilot

Azure Web Application Firewall (WAF) integration in Microsoft Copilot for Security has reached general availability. This integration supports both Azure Front Door WAF and Azure Application Gateway WAF.  

By integrating Azure WAF with the Security Copilot, organizations can streamline security operations, and accelerate investigations, helping security teams stay ahead of increasingly sophisticated threats.  

Key Features Available in GA  

• SQL Injection (SQLi) Attack Analysis  
• Generate summaries of SQLi attacks, explaining why Azure WAF blocks them.  
• Analyze WAF diagnostic logs and track attack patterns over time.  
• Cross-Site Scripting (XSS) Attack Analysis  
• Summarize attack patterns and enforcement mechanisms used by Azure WAF.  
• Correlate logs across different events to highlight emerging threats.  
• Top Offending IP Analysis  
• Identify the most malicious IPs within the environment.  
• Review WAF rules triggered by these IPs to refine security policies.  
• Top Azure WAF Rules Analysis  
• Retrieve contextual details about frequently triggered WAF rules.  
• Optimize security response strategies based on real-time analytics.  

Learn more.