You may already know Azure Web Application Firewall, the solution to protect your web applications against common exploits and vulnerabilities integrated with Azure Application Gateway.

Well, Azure WAF has been improved by providing integration with Azure Content Delivery Network (CDN) – the CDN capability for delivering high bandwidth content.

With this integration, your CDN endpoints are now being protected by WAF against common exploits like SQL injection or cross site scripting.

You can use either Azure portal (https://portal.azure.com/), Azure PowerShell, Azure Cli or API’s to configure your WAF security rules to protect your CDN.

Using the portal, search for web application firewall and then create or update your WAF policy

When creating a new WAF policy, you can choose Azure CDN which then let you select the CDN profile and endpoint to be protected by Azure WAF

Enjoy