ReleaseBytes
azure Azure Updates ·

Azure WAF Updates Managed Ruleset Support Policy

securityazuregaengineer
announcement

Azure is updating its managed ruleset support policy for Web Application Firewall (WAF) following the general availability of Default Rule Set (DRS) 2.2. This policy change provides a predictable lifecycle for managed rulesets, supporting the latest three versions (N, N-1, N-2) at any given time. As older versions (N-3) enter a one-year final support period, customers are advised to upgrade to maintain full protection and benefit from ongoing security improvements.

  • →Older Rulesets Enter Final Support Year
  • →Updated Managed Ruleset Support Policy for Azure WAF
  • →Three Latest Ruleset Versions Supported
  • →Recommendation to Upgrade Ruleset Versions
Deprecations (1) ›
  • Older Rulesets Enter Final Support Year

    Ruleset versions that become N-3 will enter a one-year final support period, receiving only critical security updates. With DRS 2.2, CRS 3.1, CRS 3.0, DRS 1.2, DRS 1.1, and DRS 1.0 are entering this final support phase, ending on February 26, 2027.

Notes (3) ›
  • Updated Managed Ruleset Support Policy for Azure WAF

    Azure WAF is adopting a new managed ruleset support policy, aligning with the general availability of Default Rule Set (DRS) 2.2. The policy ensures customers have a clearer lifecycle for security protections.

  • Three Latest Ruleset Versions Supported

    Starting with DRS 2.2, Azure WAF will support the three most recent managed ruleset versions (N, N-1, and N-2) concurrently. This provides customers with access to current security enhancements.

  • Recommendation to Upgrade Ruleset Versions

    Customers are encouraged to upgrade to a supported ruleset version to ensure continuous, full protection coverage, benefit from enhanced detections, and reduce false positives.

Read the original announcement →

https://azure.microsoft.com/en-us/updates/?id=558016

Related releases