Application Gateway Web Application Firewall policies should have bot protection enabled
Evaluates Application Gateway Web Application Firewall policies for bot protection. Bot protection helps protect web applications from malicious bots that can scrape content, perform credential stuffing, or launch DDoS attacks against the site.
Bot protection helps protect web applications from malicious bots that can scrape content, perform credential stuffing, or launch DDoS attacks. Enabling bot protection enhances application security.
What this control checks
Azure Web Application Firewall policy on Application Gateway must have bot protection enabled.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.web_application_firewall_policy_bot_protection_enabled.
Framework-specific interpretation
CIS Azure Benchmark v5.0.0: Mapped to 7.15 (Ensure bot protection is enabled in Azure Web Application Firewall policy on Azure Application Gateway).
Framework mappings
The clauses this control is mapped to in each framework.
- 7.15 Ensure bot protection is enabled in Azure Web Application Firewall policy on Azure Application Gateway
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
web_application_firewall_policy_bot_protection_enabled - Powerpipe Control:
azure_compliance.control.web_application_firewall_policy_bot_protection_enabled
Last reviewed: 2026-10-15