rules/findings/azure/Networking/azure-app-gateway-missing-waf-body-inspection.json
|
{
"provider": "Azure", "serviceType": "Networking Services", "serviceName": "Networking Services", "displayName": "Ensure request body inspection is enabled in Azure Web", "description": "Enable request body inspection so that the Web Application Firewall evaluates the contents of HTTP message bodies for potential threats.", "rationale": "Enabling request body inspection strengthens security by allowing the Web Application Firewall to detect common attacks, such as SQL injection and cross-site scripting.", "impact": "Minor performance impact on the Web Application Firewall. Additional effort may be required to monitor findings.", "remediation": { "text": "Remediate from Azure Portal 1. Go to Application gateways. 2. Click the name of an application gateway. 3. Under Settings, click Web application firewall. 4. Under Associated web application firewall policy, click the policy name. 5. Under Settings, click Policy settings. 6. Check the box next to Enforce request body inspection. 7. Click Save. 8. Repeat steps 1-7 for each application gateway and firewall policy requiring remediation. Remediate from Azure CLI For each firewall policy requiring remediation, run the following command to enable request body inspection:", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://learn.microsoft.com/en-gb/azure/web-application-firewall/ag/application-gateway-waf-request-size-limits#request-body-inspection", "https://learn.microsoft.com/en-us/cli/azure/network/application-gateway?view=azure-cli-latest", "https://learn.microsoft.com/en-us/cli/azure/network/application-gateway/waf-policy?view=azure-cli-latest" ], "compliance": [ { "name": "CIS Microsoft Azure Foundations", "version": "5.0.0", "reference": "7.14", "profile": [ "Level 2" ] } ], "level": "low", "tags": [], "rule": { "path": "", "subPath": null, "selectCondition": {}, "query": [ ], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "properties": {}, "expandObject": null }, "table": "default", "decorate": [], "emphasis": [], "actions": { "objectData": { "properties": [], "expandObject": null, "limit": null }, "showGoToButton": "True", "showModalButton": "True", "directLink": null } }, "text": { "data": { "properties": {}, "expandObject": null }, "status": { "keyName": [], "message": "", "defaultMessage": null }, "properties": { "resourceName": null, "resourceId": null, "resourceType": null }, "onlyStatus": false } }, "idSuffix": "", "notes": [], "categories": [], "immutable_properties": [], "id": "azure_networking_010" } |