There is a public preview of OWASP ModSecurity Core Rule Set 3.2 for Azure Web Application Firewall since July 2021.
I´m wondering when it will be an official offer for Azure customers, once it has important improvements that could be usefull for us.
We´re experiencing issues with the current version and in QA we could see good results using 3.2 preview version.
Hello @HelioAdeOliveira-2745, Welcome to the Microsoft Q&A forum. I have reached out to the team internally regarding this issue and I will make an update here as soon as I get a response. Thank you!
Hello @HelioAdeOliveira-2745, I got a response back from the team. The OWASP ModSecurity Core Rule Set 3.2 for Azure Web Application Firewall is currently planned to go GA by end of this quarter (June 2022).
Hope this helps!
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Thank you Chaitanya!
On the point of view of answering my question, I´m happy to know that there is a date to promote to GA soon.
But now I have a ticket escalated with Microsoft regarding a situation where the current WAF/OWASP version is impacting my production. We conducted tests with 3.0, 3.1 and 3.2 versions and the problem is solved only with 3.2. But, once it´s in preview, I can´t adopt it in Production environment.
Should be great if it could be promoted to GA now. Do you have an idea why it´s still in preview, since July 2021?
5 people are following this question.
