November 5, 2026 · AzureLaunched
Generally Available: WAF Insights for Azure Application Gateway
WAF Insights for Azure Application Gateway Web Application Firewall (WAF) is now generally available. WAF Insights is a built-in experience in the WAF policy that brings WAF logs and metrics together in interactive dashboards, so you can investigate blocked requests, analyze attack patterns, and identify false positives without writing queries.
With general availability, WAF Insights supports both Azure Diagnostics and resource-specific logs, renames the Triage tab to Investigate, and counts each request once by its final WAF outcome. Use the Monitor tab to track WAF activity and the most active rules, and the Investigate tab to drill down from a rule or a URL to the exact request and every rule it matched.
Learn more.
More Application Gateway changes
Validates JSON Web Tokens centrally through the AuthPolicy custom resourcePreview
Private frontends reachable only through approved Azure Private Link private endpointsPreview
TLS termination with private keys kept in Azure Key Vault Managed HSMGA
Exceptions let specific requests bypass WAF inspection at rule, rule group or ruleset levelGA