SignalR and the WAF in Application Gateway

Peter 6 Reputation points
2020-07-17T08:12:31.51+00:00

If I host a Blazor server side website in Azure using an App Service and the Azure SignalR service, and in front of this website there is the Azure Application Gateway. Will the SignalR packages go through the WAF? Plus will the WAF be able to detect any SQL injection attacks by examining the packages, like it can do for normal HTTP requests?

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
962 questions
Azure Web Application Firewall
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. TravisCragg-MSFT 5,676 Reputation points Microsoft Employee
    2020-08-05T01:48:42.067+00:00

    Application Gateway does support WebSockets, however the WAF for Application Gateway will typically block it by default. You will likely need to add an exclusion rule to allow the WebSocket connections.

    These rules will not be checked for SQL Injection attacks, so you might need additional protection in your application.

    0 comments