An Azure service that provides a cloud content delivery network with threat protection.
Front Door WAF policy: How to get logs when "Block by ASN"
I've created a "Front Door WAF policy" which blocks requests by ASN. I can see in the logs, that requests are blocked. Because I want to assess, whether the blocks are correct, I need to see the actual ASN of the blocked requests. So my…
Azure Front Door
Subject: Azure Front Door Premium returns 504 through Private Link to Application Gateway (APIM backend)
Summary I followed the Microsoft documentation to connect Azure Front Door Premium to an Application Gateway over Private Link, with API Management behind the gateway. The Private Link connection is approved, but calls through Front Door return 504.…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Is custom TLS cipher suite configuration supported for Azure Front Door Premium in Azure Government?
We are using Azure Front Door Premium in Azure Government as our public endpoint. TLS is terminated at Front Door. A recent vulnerability assessment scan identified the following cipher suites as enabled on our Front Door…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Facing Not Secure issue on Chrome when trying to use Azure Front Door custom domain
Facing Not Secure issue on Chrome when trying to use Azure Front Door custom domain. But when the inbound traffic is switched only to firewall we don't face such error. Using GoDaddy provided R1 certificate. Website shows up secure on edge when inbound…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door Health Probe: CertificateError During Intermittent TLS Handshake — Causes and Troubleshooting
Problem description I am experiencing intermittent CertificateError messages during Azure Front Door health probes against my Azure App Service origins. The issue started around 28 October 2026, with the health probes failing intermittently with…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Health Probe Intermittently Failing with CertificateError
We are experiencing intermittent Azure Front Door health probe failures with CertificateError. Azure Front Door sends HTTPS health probes to an Azure App Service configured as the origin. Both Front Door and App Service use Azure-managed…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door hostname still "owned by another profile" after its custom domain and profile were deleted
We can't add the custom domain did.devsandbox.verifiedorchestration.com to an Azure Front Door Standard profile. We deleted the custom domain from the profile that held it, and then deleted that whole profile. Front Door still reports the hostname as…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AI answer
Front Door : After Issue with subscription our frontdoor endpoint not working
We have Azure Front Door, and after reactivating the subscription, the Front Door endpoint isn't working; when I access it, I get a Page Not Found error. Even adding a custom domain isn't working.
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
AI answer
Front Door managed cert for apex domain stuck in PendingRevalidation, TXT record is correct, expires 2026-10-06. Can revalidation be re-run without regenerating the token?
Problem description The Front Door-managed certificate for our apex custom domain (Premium profile) is in PendingRevalidation. It probably entered that state around 2026-08-22, 45 days before expiry. The certificate expires on 2026-10-06 19:59…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
How does caching work for Frontdoor when a JS challenge is enabled
Hello, I'm trying to get a better understanding of how caching works in Frontdoor when a JS Challenge WAF rule is enabled, however I'm struggling to find any documentation around this. From what I can tell, when the JS Challenge rule is enabled…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Premium WAF policy creation fails while Microsoft.Network/AllowFrontdoor remains Pending
I am configuring Azure Front Door Premium and cannot create a Web Application Firewall policy. The Front Door Premium resources themselves are working correctly: Front Door Premium profile is Active Endpoint is provisioned successfully Origin group and…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Entra Documentation for External ID is WILDLY Wrong
https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/external-id/customers/concept-custom-url-domain.md indicates that the x-forwarded-for header provided by Azure Front Door to CIAM Login when using custom domains WILL use the actual user IP…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Standard: UrlRewrite action inconsistently rewrites the same URL (identical config, result flips between 200 and 404)
I'm seeing a reproducible, inconsistent behavior in the UrlRewrite Rules Engine action on Azure Front Door Standard, using a configuration that matches the official documentation example exactly. Context Front Door Standard (sku.name:…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door stuck in CommittingMigration since 2025-10-29 — abort and commit fail
The Azure Front Door profile "cdn-modeling" in resource group "jazz-modeling" has been stuck in the "CommittingMigration" state since 2025-10-29. Current state: provisioningState: Succeeded resourceState:…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Front Door Standard serves self-signed Sectigo Root R46 instead of uploaded cross-signed chain (BYOC)
We use Azure Front Door Standard with our own certificate (BYOC) from Key Vault: a Sectigo wildcard certificate *.example.com, issued by Sectigo Public Server Authentication CA DV R36. The root Sectigo Public Server Authentication Root R46 is only…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Standard stuck at DeploymentStatus NotStarted with HTTP 404
Hello, I am experiencing an issue with a newly created Azure Front Door Standard configuration. The Azure Front Door resources are provisioned successfully, but the endpoint and route remain with DeploymentStatus = NotStarted, and the Front Door endpoint…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door showing "Degraded (Unplanned)" from 1 month everyday
Azure Front Door profile that is continuously showing “Degraded (Unplanned)” under Resource Health from more than a month . This is what been displayed "We are sorry, your Front Door/CDN profile may be experiencing problems. We're working to…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door certificate auto-renewal with Azure Public DNS Alias record?
If a domain is validated by Azure Front Door via a TXT record, and the DNS apex (contoso.com) is hosted in Azure Public DNS, and a certificate is issued through Azure Front Door, the documentation states that a CNAME DNS record needs to point to AFD for…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door rule sets stuck in deploymentStatus=NotStarted — geo‑routing rules not executing at edge
Two production rule sets attached to Azure Front Door routes are not deploying to the edge. Their deploymentStatus remains NotStarted indefinitely, even though provisioningState is Succeeded. As a result: RouteConfigurationOverride actions never…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
Azure Front Door Standard: Deployment Status Remains NotStarted Despite Successful Provisioning
Problem description I am experiencing an issue where my Azure Front Door Standard endpoint and route are stuck in a deployment status of 'NotStarted' since the initial report on September 19, 2026. Despite the provisioning state showing 'Succeeded' for…
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.