Public Preview: X-Forwarded-For (XFF) grouping for rate limiting on Application Gateway WAF v2
Microsoft announced a preview of this Web Application Firewall update in February 2026.
In development1 version
Facts
- Microsoft id
555205- Status
- In development
- Products
- Web Application Firewall
- Update type
- Features, Security
- Product categories
- Networking, Security
- Preview
- February 2026
- Status pages
- Azure Web Application Firewall status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Azure Updates · open the original at Microsoft
Microsoft says
Application Gateway Web Application Firewall (WAF) v2 now supports additional rate‑limiting GroupBy options based on the X‑Forwarded‑For (XFF) HTTP header.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
As first seen: In development
- Status
- In development
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Other changes for Azure Web Application Firewall
- Public preview: Sensitive data protection for Azure Front Door Web Application Firewall · In preview
- Retirement: Support for Application Gateway Web Application Firewall v2 Configuration is ending
- Public Preview: Azure Web Application Firewall (WAF) integration in Microsoft Copilot for Security · In preview
- Public preview: Rate-limit rules for Application Gateway Web Application Firewall · In preview
- Public preview: Sensitive Data Protection for Application Gateway Web Application Firewall logs · In preview
- Public Preview: Default Rule Set 2.1 for Regional WAF with Application Gateway · In preview
- Public preview: Manage Azure Web Application Firewall policies in Azure Firewall Manager · In preview
- Public Preview: JavaScript (JS) Challenge on Azure WAF integrated with Azure Application Gateway · In preview
Last updated