azure Azure Updates ·

Azure Application Gateway WAF now supports custom block response codes and bodies

securityazuregaengineer
feature announcement

Azure Web Application Firewall (WAF) integrated with Application Gateway now supports customizable response status codes and bodies for blocked requests. This General Availability feature gives customers greater flexibility and control over how blocked requests are presented, moving beyond the default 403 status code and generic message. The customization is a policy-level setting, ensuring all blocked requests receive a consistent custom response. This enhances both user experience and security management for Azure WAF users.

Features (1)
  • Customizable WAF block responses for Application Gateway

    Azure WAF integrated with Application Gateway now supports customizable response status codes and bodies for blocked requests. This policy-level setting allows customers to define their own status code and message, replacing the default 403 with 'The request is blocked'.

Read the original announcement →

https://azure.microsoft.com/updates?id=569504

Related releases