Generally Available: Azure Front Door profile and route level WAF policies

Announcing the general availability of profile and route level policies for Azure Web Application Firewall (WAF) on Azure Front Door Premium. WAF policies are no longer limited to individual domains: you can now apply broad baseline protection across an entire Azure Front Door profile and use targeted policies for the routes that need different controls.

You can associate a WAF policy at the profile, domain, or route scope. For example, use a profile level policy for common protections across every domain in a profile, then apply a route level policy to sensitive paths such as sign-in, checkout, or API routes. This reduces policy duplication for teams that run many applications behind a single Azure Front Door profile, while keeping granular controls where they're needed.

When more than one scope applies to a request, Azure Front Door uses the most specific policy: a route level policy takes precedence over a domain level policy, and a domain level policy takes precedence over a profile level policy. Existing domain level associations continue to work without any changes.

Learn more.