Detection Is Not Protection: What Azure WAF Detection Mode Actually Does (and Doesn't)
Summary
The article explains that Azure WAF in Detection mode logs and forwards traffic instead of blocking, which can mislead dashboards. It provides practical guidance on identifying Detection mode, modifying queries to filter by policyMode_s, and steps to move to Prevention, including hard tuning deadlines and enforcing Prevention with Azure Policy.