Azure WAF false positive problems

Hello @Shigeru Nakagaki,

Thanks for reaching out to Microsoft Q&A.

I understand that you're experiencing with the frequent false positives with Azure WAF DRS 2.1.

One benefit of using an exclusion list is that only the match variable you select to exclude will no longer be inspected for that given request. That is, you can choose between specific request headers, request cookies, query string arguments, or request body post arguments to be excluded if a certain condition is met, as opposed to excluding the whole request from being inspected. The other nonspecified variables of the request are inspected normally. You can refer to the below document.

Reference: Web Application Firewall (WAF) exclusion lists.

Reference Document: Resolve false positives

Refining and customizing your rules may help reduce false positives. Misconfigurations can result in false alerts, so make sure your rules match your specific workloads.

Reference Documents:
Customize WAF rules through the Azure portal
Azure Web Application Firewall Monitoring and Logging
WAF Actions.

Kindly let us know if the above helps or you need further assistance on this issue. please share us the requested details in the private message.

Please "upvote" if the information helped you. This will help us and others in the community as well.