Azure Compliance ControlsAzure Web Application Firewall
Application Gateway Web Application Firewall policies should have bot protection enabled
Evaluates Application Gateway Web Application Firewall policies for bot protection. Bot protection helps protect web applications from malicious bots that can scrape content, perform credential stuffing, or launch DDoS attacks against the site.
What this control checks
Azure Web Application Firewall policy on Application Gateway must have bot protection enabled.
Framework mappings
The clauses this control is mapped to in each framework.
- 7.15 Ensure bot protection is enabled in Azure Web Application Firewall policy on Azure Application Gateway
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
web_application_firewall_policy_bot_protection_enabled - Powerpipe Control:
azure_compliance.control.web_application_firewall_policy_bot_protection_enabled
Last reviewed: 2026-10-15