Token导航 LogoToken导航TokenDH.com
中转站排行榜
云服务external-servicegithub未标认证来源可访问许可证需确认审计提醒

azure-web-application-firewall（Azure WEB application firewall 部署）

Agent Skill

用于辅助云资源、部署、容器、基础设施和运维自动化任务。它适合让 Agent 检查配置、整理部署步骤、分析资源状态、生成排障思路或辅助云服务接入。使用时需要明确目标环境、账号权限、区域和资源组，区分本地测试与生产操作；涉及删除资源、重启服务、修改网络或权限配置时，应先确认影响范围。

总安装

792

周安装

34

GitHub Stars

519

下载量

277
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息，不托管安装包，也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手，先确认命令和权限，再让它执行。

请帮我安装这个 Agent Skill：azure-web-application-firewall（Azure WEB application firewall 部署）
来源仓库：https://github.com/microsoftdocs/agent-skills
仓库路径：skills/azure-web-application-firewall
安装命令：
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-web-application-firewall
安装前请先检查当前环境是否支持对应 CLI，并向我确认将要执行的命令、安装目录、联网范围和文件读写权限；确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill；本站只展示命令，不托管安装包，也不自动执行。

skills.shnpx skills
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-web-application-firewall

简介

基于 Azure WAF 提供 Web 安全防护与规则优化建议。

  • 包括攻击检测、策略调优、日志分析与合规性检查。
  • 支持 OWASP 规则集管理与自定义防护策略制定。
  • 调整防护级别或添加规则前应评估业务流量特征与安全需求。
  • azure-web-application-firewall 属于云服务类 Skill，可作为该场景下的辅助能力补充。

SKILL.md

Azure Web Application Firewall Skill

This skill provides expert guidance for Azure Web Application Firewall. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file
IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L42Diagnosing and fixing common Azure WAF issues on Front Door and Application Gateway, including false positives, blocked requests, rule tuning, and investigating WAF logs.
Best PracticesL43-L51Best practices for configuring, tuning, and hardening Azure WAF on Front Door and Application Gateway, including rule tuning, exclusions, geomatch rules, and deployment security.
Decision MakingL52-L58Guidance on planning and executing migration from legacy WAF configs to full WAF policies, and choosing/upgrading the appropriate Azure WAF managed rulesets.
Architecture & Design PatternsL59-L63Architectural guidance for designing DDoS-resistant web apps using Azure WAF with Front Door, including traffic flow, protection layers, and best-practice deployment patterns.
Limits & QuotasL64-L68Configuring WAF request body and file upload size limits on Application Gateway, including max size settings, constraints, and how to safely adjust them.
SecurityL69-L75Details on WAF security rules (Front Door DRS), bot protection on Application Gateway, and enforcing WAF configurations and governance using Azure Policy.
ConfigurationL76-L122Configuring Azure WAF (Front Door & App Gateway): policies, custom/managed rules, rate limiting, geo/IP filters, bot/CAPTCHA, exclusions, logging/scrubbing, and custom block responses.
Integrations & Coding PatternsL123-L133Using WAF with other Azure services: integrating logs with Sentinel/Log Analytics, automating incident response, investigating events, and protecting APIM/Azure OpenAI via Front Door WAF.
DeploymentL134-L139How to deploy and provision Azure Application Gateway WAF v2 using Bicep, ARM templates, or Terraform, including required resources, parameters, and configuration structure.

Troubleshooting

TopicURL
Resolve common Azure Front Door WAF questionshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-faq
Resolve common Azure Application Gateway WAF issueshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-faq

Best Practices

TopicURL
Implement best practices for Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-best-practices
Tune Azure Front Door WAF rules and exclusionshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-tuning
Apply best practices for Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/best-practices
Apply geomatch WAF rules to strengthen web app securityhttps://learn.microsoft.com/en-us/azure/web-application-firewall/geomatch-custom-rules-examples
Secure and harden Azure Web Application Firewall deploymentshttps://learn.microsoft.com/en-us/azure/web-application-firewall/secure-web-application-firewall

Decision Making

TopicURL
Migrate Azure Application Gateway WAF configs to full policieshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/migrate-policy
Plan upgrade from WAF configuration to WAF policyhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/upgrade-ag-waf-policy
Choose and upgrade Azure WAF managed rulesetshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ruleset-support-policy

Architecture & Design Patterns

TopicURL
Design application DDoS protection with Azure WAF and Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/shared/application-ddos-protection

Limits & Quotas

TopicURL
Configure WAF request and file upload size limits on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-request-size-limits

Security

TopicURL
Understand Azure WAF Front Door DRS rule groupshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-drs
Understand bot protection capabilities on Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/bot-protection-overview
Enforce WAF governance using Azure Policyhttps://learn.microsoft.com/en-us/azure/web-application-firewall/shared/waf-azure-policy

Configuration

TopicURL
Configure CAPTCHA challenges in Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/captcha-challenge
Configure custom block responses for Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-custom-response-code
Configure IP restriction rules in Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-ip-restriction
Create and attach a WAF policy in Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-create-portal
Define custom WAF rules for Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-custom-rules
Configure Azure Front Door WAF custom and managed ruleshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-custom-rules-powershell
Configure exclusion lists for Front Door WAF policieshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion
Set up WAF exclusion rules on Azure Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion-configure
Configure geo-filtering rules in Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-geo-filtering
Configure monitoring and logging for Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-monitor
Enable and configure bot protection in Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-configure-bot-protection
Configure Azure Front Door WAF policy-level settingshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-policy-settings
Configure rate limiting policies in Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit
Create and tune WAF rate-limit rules on Front Doorhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-rate-limit-configure
Create a geo-filtering WAF policy with PowerShellhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-tutorial-geo-filtering
Configure log scrubbing on Azure Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-sensitive-data-protection-configure-frontdoor
Enable sensitive data protection for Front Door WAF logshttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-sensitive-data-protection-frontdoor
Reference for Application Gateway WAF CRS and DRS ruleshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules
Customize Application Gateway WAF rules using Azure CLIhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-customize-waf-rules-cli
Customize Application Gateway WAF rules in Azure portalhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-customize-waf-rules-portal
Customize Application Gateway WAF rules with PowerShellhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-customize-waf-rules-powershell
Configure WAF exclusion lists on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-configuration
Configure and analyze Application Gateway WAF metricshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-waf-metrics
Associate WAF policies with existing Application Gatewayshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/associate-waf-policy-existing-gateway
Configure bot protection rules for Azure Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/bot-protection
Configure custom block response codes and pages for Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/configure-custom-response-code
Create WAF v2 custom rules with Azure PowerShellhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/configure-waf-custom-rules
Design and apply WAF v2 custom rules on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/create-custom-waf-rules
Create and attach WAF policies to Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/create-waf-policy-ag
Overview of WAF v2 custom rules on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/custom-waf-rules-overview
Configure HTTP DDoS ruleset for Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/ddos-ruleset
Configure geomatch custom rules for Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/geomatch-custom-rules
Use Application Gateway WAF Insights dashboardshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/insights
Configure per-site WAF policies with PowerShellhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/per-site-policies
Understand and scope WAF policies on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/policy-overview
Create rate-limiting custom rules for Application Gateway WAF v2https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/rate-limiting-configure
Configure rate limiting for Azure Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/rate-limiting-overview
Upgrade CRS/DRS ruleset versions on Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/upgrade-ruleset-version
Configure sensitive data protection in WAF logshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/waf-sensitive-data-protection
Set up WAF log scrubbing on Application Gatewayhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/waf-sensitive-data-protection-configure
Enable and manage logging for Azure WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-logs
Manage WAF policies centrally with Azure Firewall Managerhttps://learn.microsoft.com/en-us/azure/web-application-firewall/shared/manage-policies
Use JavaScript challenge for bot mitigation in WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-javascript-challenge

Integrations & Coding Patterns

TopicURL
Automate WAF incident response with Microsoft Sentinelhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/automated-detection-response-with-sentinel
Protect APIM-hosted APIs with Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/protect-api-hosted-apim-by-waf
Secure Azure OpenAI endpoints using Front Door WAFhttps://learn.microsoft.com/en-us/azure/web-application-firewall/afds/protect-azure-open-ai
Analyze Application Gateway WAF logs with Log Analyticshttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/log-analytics
Investigate Azure WAF events with Security Copilothttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-copilot
Detect new web threats using WAF and Sentinelhttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-new-threat-detection
Integrate Azure WAF logs with Microsoft Sentinelhttps://learn.microsoft.com/en-us/azure/web-application-firewall/waf-sentinel

Deployment

TopicURL
Deploy Azure Application Gateway WAF v2 using Bicephttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/quick-create-bicep
Deploy Azure Application Gateway WAF v2 via ARM templatehttps://learn.microsoft.com/en-us/azure/web-application-firewall/ag/quick-create-template
Provision Application Gateway WAF v2 with Terraformhttps://learn.microsoft.com/en-us/azure/web-application-firewall/quickstart-web-application-firewall-terraform

适合场景

01

Azure 资源规划

02

云服务升级

03

基础设施检查

04

企业云环境自动化

能力概览

能力 1

整理 Azure 服务操作流程

能力 2

提示 CLI/MCP 前置条件

能力 3

辅助云资源检查和规划

能力 4

保留官方服务来源线索

安装后应在对应宿主中按原始 README 的触发条件使用；具体调用方式请以来源页面和 README 为准。

平台分布

Codex

32.92%
按下载量换算91

Claude

28.61%
按下载量换算79

Cursor

20.18%
按下载量换算56

Gemini CLI

9.75%
按下载量换算27

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

可疑

权限和风险

external-service

该 Skill 可能调用第三方服务、云服务或外部模型 API，使用前需要确认账号、额度、数据发送范围和服务条款。

安装前确认

本站仅展示第三方公开信息，不托管安装包，不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果，不能写成本站确认安全。当前只有一个来源，正式发布前建议补源仓库或其他目录站核验。

来源信息

GitHub 仓库

github.com

/microsoftdocs/agent-skills

SKILL.md 来源

github.com

/microsoftdocs/agent-skills/tree/main/skills/azure-web-application-firewall

skills-sh

skills.sh

/microsoftdocs/agent-skills/azure-web-application-firewall

继续浏览同类 Skills

更多云服务 Skills（479）返回 Skills 目录

上一个 Skill

azure-vpn-gateway（Azure VPN gateway 部署）

用于辅助云资源、部署、容器、基础设施和运维自动化任务。它适合让 Agent 检查配置、整理部署步骤、分析资源状态、生成排障思路或辅助云服务接入。使用时需要明确目标环境、账号权限、区域和资源组，区分本地测试与生产操作；涉及删除资源、重启服务、修改网络或权限配置时，应先确认影响范围。

下一个 Skill

azure-web-pubsub（Azure WEB pubsub 部署）

用于辅助云资源、部署、容器、基础设施和运维自动化任务。它适合让 Agent 检查配置、整理部署步骤、分析资源状态、生成排障思路或辅助云服务接入。使用时需要明确目标环境、账号权限、区域和资源组，区分本地测试与生产操作；涉及删除资源、重启服务、修改网络或权限配置时，应先确认影响范围。