Switch Application Gateway tier from WAF v2 to Standard V2

cai1991 21

For Application Gateway V2, there is tab to switch tier, but the tip says "Changing from the WAF_v2 tier to the Standard_v2 tier is not supported". But when actually switching it from waf v2 to standard v2 and it's saved successfully.
Is this ok to do that?

GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-02-02T11:55:35.203+00:00

Hello @cai1991 ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

As mentioned by you and @zaamasu , it is possible to change Application Gateway tier from WAF v2 to Standard V2 despite the "not supported" tooltip on Azure portal.

I confirmed this in my lab and hence reached out to the Application gateway Product group team and they mentioned that there was a genuine limitation last year which is why we had a validation check as well as a tooltip notification. It looks like the limitation has been resolved but the portal UI was not updated. However, we are still checking if the tooltip message can be removed and Tier can be switched safely from WAF to Standard. And this will require a thorough evaluation, so we will need until end of this month to look into this along with other planned/ongoing projects.

Could you please let us know how critical is it for you to make this change? Is it just a test or you intend to do something for your production environment?

Regards,
Gita
GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-02-04T12:01:25.277+00:00

Hello @cai1991 ,

Could you please provide an update on this post?

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-02-07T03:22:18.513+00:00

Hello @cai1991 , do you have any further updates on this issue?
GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-02-09T06:00:35.847+00:00

Hello @cai1991 , I'm following up on my above comment to check if it helps or you need further assistance on this issue. Please provide an update on the same.
Lujain Nazem Albadarneh 16 Reputation points Microsoft Employee

2022-09-28T15:29:19+00:00

Hello @GitaraniSharma-MSFT

As i can see, we still have the tooltip stating its not supported, do we have any information regarding this?
GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-09-29T14:25:58.147+00:00

Hello @Lujain Nazem Albadarneh ,

I will check with Application gateway Product Group team and get back to you with an update on this.

Regards,
Gita
Lujain Nazem Albadarneh 16 Reputation points Microsoft Employee

2022-10-03T11:00:13.37+00:00

Hello @GitaraniSharma-MSFT

Thanks a lot.

Did you hear back from them regarding this?

Regards,

Lujain
GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-10-04T12:40:58.763+00:00

Hello @Lujain Nazem Albadarneh ,

The PG team responded back stating that they have added an internal worktime to get this fixed but they still don't have an updated ETA on the roll-out.

I will check and update once this is fixed.

Regards,
Gita
Lujain Nazem Albadarneh 16 Reputation points Microsoft Employee

2022-10-05T07:43:18.71+00:00

Hello @GitaraniSharma-MSFT

Thanks a lot for getting back to me on this.

Do you mean that they will fix the tip that we have on the portal? does that mean the cx can revert from WAF to standard again, safely ?

Warm regards,

Lujain
Lujain Nazem Albadarneh 16 Reputation points Microsoft Employee

2022-10-07T05:30:26.593+00:00

Hello @GitaraniSharma-MSFT

hope you are doing good!

Do you have any update on this?

Warm regards,

Lujain
GitaraniSharma-MSFT 49,581 Reputation points Microsoft Employee

2022-10-10T16:24:05.557+00:00

Hello @Lujain Nazem Albadarneh ,

Yes, the PG will fix the tool tip that we have on the portal and you can revert from WAF to standard safely without any issues.

Regards,
Gita
Lujain Nazem Albadarneh 16 Reputation points Microsoft Employee

2022-10-10T20:07:14.637+00:00

Hello @GitaraniSharma-MSFT

Thanks a lot for your help!

Warm regards,

Lujain

2 answers

zaamasu 791 Reputation points

2022-01-31T12:02:47.363+00:00

Hi,

According to my verification, I could change Application Gateway's level from "WAF_v2" to "Standard_v2" too(I could change it from [Configuration] but failed [Web application firewall] at left pain), and I can see the same message that "not supported".
However, my Application Gateway has worked and no error occurs at the moment.

I couldn't find the Microsoft official KB that means the message "not supported".
But I realize that the difference point between "WAF_v2" and "standard_v2" is whether [Web Application Firewall] function is valid or not. So, I think if you wouldn't like to use [Web Application Firewall] function. maybe it's OK to set "Standard_v2".

But if you have any problems after changing, please switch back from "Standard_v2" to "WAF_v2".

I hope that it will be helpful for you.

Best regards,
Zaamasu
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Preetha Rajesh 51 Reputation points

2022-10-17T09:29:04.217+00:00

Hi

I would like to add my view here.

We do have application gateway in production environment and the selected tier is WAF V2(settings->configuration), which in turn is associated with web application firewall policy.

If you try to change WAF v2 to standard v2, it will throw an error stating “Application gateway does not support Firewall policy with the selected SKU tier standard_v2”

We can try disabling the “associated web application firewall policy” , by clicking on
settings->web application firewall-> click on the associated firewall policy -> click disable in the overview page.
Once above step is done, try changing it to standard v2 tier.

Please refer below link
https://learn.microsoft.com/en-us/azure/application-gateway/overview-v2

Microsoft specifies the enhancements of v2 (standard/WAF) and clear feature comparison of v1 and v2.
There is no official documentation on switching WAF v2 to standard v2.

There is no need to switch from WAF V2 to Standard V2

I would request @Azure Support to confirm.

Thank You
Preetha
Please sign in to rate this answer.
Emil Enchev 0 Reputation points

2024-05-28T07:08:57.97+00:00

Hi,

I am about to do this in production environment. Was not able to find official documentation. Basically we will not need waf policy, so we want to change from WAFv2 ->standard v2. Is there any downtime, device/service restart/redeploy expected or just the waf policy is removed ?

Thanks.

Emil
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Switch Application Gateway tier from WAF v2 to Standard V2

2 answers

Your answer