SOAR: Block Log Analytics IP Entities on Azure Frontdoor / WAF #2

Use this function and logic app, to block abusive IP addresses using a custom rule, that hit a certain block limit on Azure WAF / Frontdoor. Leveraging Log Analytics Alerts. This greatly improves security for your origins, as threat actors won’t be able to scan indefinitely (or until rate limit is reached) for vulnerabilities. In … Read more

SOAR: Block Sentinel IP Entities on Azure Frontdoor / WAF

Please read blog 2 instead, using Log Analytics is more cost effective and doesn’t have a 10 entity limit. https://potsolutions.nl/2023/05/20/block-sentinel-log-analytics-entities-on-azure-waf-2/ Update 2025.02.22 – Just released blog 3: SOAR: Block Log Analytics IP Entities on Azure Frontdoor / WAF #3 – Prof-IT Azure Frontdoor is a powerful tool for managing web traffic, but it doesn’t always … Read more