Azure Front Door Bot Protection is the managed bot rule set of Azure Web Application Firewall (WAF) for Azure Front Door Premium. It sorts traffic into three categories: bad, good and unknown bots. According to Microsoft, bad bots include those from malicious IPs in its Threat Intelligence feed or posing as trusted bots. Good bots are verified search engine, social media and link-checking bots. The platform manages and updates the signatures. For each category you choose to block, allow, log or issue a JavaScript challenge, and WAF logs can be sent to a storage account, an event hub or Log Analytics.
The service is part of Microsoft Azure, and Microsoft Corporation is headquartered in Redmond, United States. WAF policies are replicated to Microsoft's edge locations around the world, so requests are inspected close to their source. Because the provider is a US company, the US CLOUD Act may apply to traffic and log data. For European organisations, the choice of log destination and the contractual terms, including Microsoft's Data Protection Addendum, are therefore relevant.