Rule set

In the Ultra Transcenders books

AZ-700

Each book explains Rule set in context, with comparison tables and the common traps.

Terms in this definition

• Azure Front Door

  Layer-7 global front end that fails over between origins using anycast, terminates TLS, routes requests by URL path and can apply a rate-limiting WAF.

• Rule set (Front Door)

  Rules in Azure Front Door Standard or Premium that run once a route has matched; they can change requests and responses or send traffic to a different origin group.

• Agents (classic) API

  First-generation Foundry Agent Service API, based on threads, messages and runs. It is deprecated, replaced by conversations and responses, and retires on 31 March 2027.

• Web Application Firewall

  Protection at layer 7 from OWASP Top 10 threats like XSS and SQL injection, available on Application Gateway or Front Door.

• Geographic

  A Traffic Manager routing method that picks the endpoint according to where the user is located geographically.

Related terms

• Compliance benchmark

  Whether it is a custom rule set, a regulatory standard like HIPAA, PCI DSS or DISA STIG, a CIS pack, or the built-in VCF and VMware SDDC ones, VCF Operations scores objects against it and alerts on any breach. Nothing is assessed until it is activated, and only data sources that have been set up are covered.

• Isolation policy

  A Flow Network Security rule set keeping categories of VMs from talking to each other, with multicast, broadcast and unknown-unicast blocked too.

• WAF exception

  A WAF policy setting, generally available on Application Gateway and Front Door since October 2026, that lets whole requests matching a request URI, a source IP address or a header name and value bypass one managed rule, a rule group or an entire rule set. Unlike an exclusion, which hides one part of a request from inspection, it skips the chosen rules for the request; it needs the next-generation engine with CRS 3.2 or DRS 2.1 or later.