Announcing the general availability of profile and route level policies for Azure Web Application Firewall (WAF) on Azure Front Door Premium. WAF policies are no longer limited to individual domains: you can now apply broad baseline protection across an entire Azure Front Door profile and use targeted policies for the routes that need different controls.
Azure update ID: 578153
Published: Oct 27, 2026
Status: Launched
Timeline: October 2026 General Availability
Product: Azure Front Door, Web Application Firewall
Tag: Features, Security
Category: Networking, Security
You can associate a WAF policy at the profile, domain, or route scope. For example, use a profile level policy for common protections across every domain in a profile, then apply a route level policy to sensitive paths such as sign-in, checkout, or API routes. This reduces policy duplication for teams that run many applications behind a single Azure Front Door profile, while keeping granular controls where they’re needed.
When more than one scope applies to a request, Azure Front Door uses the most specific policy: a route level policy takes precedence over a domain level policy, and a domain level policy takes precedence over a profile level policy. Existing domain level associations continue to work without any changes.