362 questions with Azure Web Application Firewall tags

Sort by: Updated
Updated Created Answers
1 answer One of the answers was accepted by the question author.

How to setup DNS to my azure Cloud

I've owned a domain Siera.xyz and went to a domain provider and changed the DNS to point to Azure records. Coming back to azure and setup the domain siera.xyz to point to the local web VM but when I nslookup and browse the URL siera.xyz it didn't…

Azure DNS
Azure DNS
An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
779 questions
Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
9,058 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Web Application Firewall
asked 2020-12-08T08:53:15.167+00:00
SieraLight 96 Reputation points
commented 2020-12-18T18:24:55.017+00:00
SaiKishor-MSFT 17,336 Reputation points
3 answers

Does Front Door WAF Exclusions work with POST body arguments?

I'm trying to exclude a body post argument from triggering a default set rule - https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-exclusion In the form, the input name is "content". I've setup an exclusion…

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
858 questions
Azure Web Application Firewall
asked 2020-07-26T09:39:25.24+00:00
Praemon 136 Reputation points
answered 2020-12-15T18:26:14.497+00:00
Ruth, Jason 1 Reputation point
1 answer

Fearture differences of WAF in CDN, Frontdoor and Application gateway

I cannot find a good feature comparison between the WAF's that can be set up in Application Gateway (v1 and v2 AND its different states - 1, 2 and 3), Frontdoor and CDN. Features like, rate limiting, bot detection, geo blocking, etc. Also if I…

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
858 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Content Delivery Network
Azure Web Application Firewall
asked 2020-10-28T08:26:04.587+00:00
Owin Gruters - iO 46 Reputation points
commented 2020-12-04T09:29:26.357+00:00
suvasara-MSFT 10,076 Reputation points Moderator
1 answer

WAFv2 Supporting TLS 1.3 for Lucky13 Vulnerability Fix

Hi Team, Need urgent help with documentation regarding fixing of Lucky-13 Vulnerability [CVE-2013-0169] raised for Azure WAFv2 which is impacting Go-Live for Customer. As per the recommendation, it requires TLS 1.3 to fix but WAF v2 does not support…

Azure Web Application Firewall
asked 2020-10-29T15:52:49.757+00:00
Girish Namala 1 Reputation point
commented 2020-12-04T09:28:45.01+00:00
suvasara-MSFT 10,076 Reputation points Moderator
1 answer

Securing Single Web App.

I currently have a single Web App and Durable Functions, 2 VMs and 1 Azure SQL Database and 1 Cosmos DB. I wanted to know what is the best approach to secure the Web App. I have read WAF, or WAF with Application Gateway or Front Door. I would need…

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
858 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Web Application Firewall
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,976 questions
asked 2020-11-22T11:51:38.713+00:00
Kman 41 Reputation points
commented 2020-11-23T20:39:34.313+00:00
ajkuma 28,036 Reputation points Microsoft Employee Moderator
1 answer One of the answers was accepted by the question author.

Secure Power BI Web App

We have installed PowerBI Gateway in our VM which is secured by firewall. The PowerBI Web Interface will be accessed by an external vendor, and the data to the PowerBI will be served by the external vendor. In other words, PowerBI in one domain will be…

Azure Web Application Firewall
asked 2020-10-24T23:17:25.723+00:00
Prasenna Kannan 436 Reputation points
accepted 2020-10-28T06:09:28.797+00:00
Prasenna Kannan 436 Reputation points
1 answer One of the answers was accepted by the question author.

Builtin Azure Service that automatically updates the attack signature heuristically ?

Hi Experts, We have the need to secure the Application Gateway and hundreds of API exposed to the Internet as part of our production environment, Using the existing builtin, Azure services, How to make it secure from Unknown Threat or 0-day attack…

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
782 questions
Azure Web Application Firewall
Azure Firewall Manager
Azure Firewall Manager
An Azure service that provides central network security policy and route management for globally distributed, software-defined perimeters.
97 questions
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2020-09-15T04:39:31.373+00:00
EnterpriseArchitect 6,061 Reputation points
commented 2020-10-06T05:32:04.21+00:00
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator
2 answers One of the answers was accepted by the question author.

Protecting a webapp within a Standard App Service plan, using a virtual firewall appliance, rather than an Application Gateway

We have a webapp (a REST API service) that is sitting in a S1 App Service plan. We are protecting the webapp with a WAF policy assigned to a listener on an Application Gateway v2. The WAF policy only protects this one webapp. We have run into a…

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,777 questions
Azure Web Application Firewall
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,976 questions
asked 2020-08-13T22:15:27.957+00:00
Rhett Blach 46 Reputation points
accepted 2020-09-28T01:49:16.893+00:00
Rhett Blach 46 Reputation points
1 answer

WAF Policy

Just starting to learn about WAF policies. If I add a listener to the WAF policy, do I need to remove that same listener from list in the WAF itself? Or does the WAF policy override any basic config within the WAF? Thanks!

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Web Application Firewall
asked 2020-09-22T18:55:42.193+00:00
Lily 41 Reputation points
commented 2020-09-23T19:13:47.5+00:00
Lily 41 Reputation points
2 answers

Application Gateway and Geo Location Setup

Hey MS world, Our Goal is to restrict access to our Web Application by Country. Basically deny all, and allow access to ONE country. Everything worked great utilizing NSG group with and Dev Team to restrict access and attacks. We installed the…

Azure Web Application Firewall
asked 2020-07-19T08:34:50.33+00:00
Danejahtt 1 Reputation point
answered 2020-09-12T11:56:20.79+00:00
Manish Jha 236 Reputation points
1 answer One of the answers was accepted by the question author.

Vulnerability scan shows "HSTS Missing From HTTPS Server" on some ports, despite HTTPS Only option.

Hello, I have deployed a Web Application - based on a linux container. I have purchased SSL certificate from Azure and added it successfully to the app. The SSL is properly reflecting on the website. I have also ticked the option to use "HTTPS…

Azure Web Application Firewall
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,976 questions
asked 2020-09-09T08:58:37.503+00:00
HrTJ 21 Reputation points
accepted 2020-09-11T02:14:10.337+00:00
HrTJ 21 Reputation points
1 answer One of the answers was accepted by the question author.

Does SignalR work over a Web Applicatiomn Firewall?

We are planning to use Azure SignalR service for a mobile app to get real-time updates. We have a requirement that all traffic on Azure go through a Web Application Firewall (Imperva WAF). Will SignalR Service work if the traffic goes through a WAF?

Azure SignalR Service
Azure SignalR Service
An Azure service that is used for adding real-time communications to web applications.
161 questions
Azure Web Application Firewall
asked 2020-08-27T17:14:07.13+00:00
Rai, Mahesh 21 Reputation points
accepted 2020-09-02T18:26:17.157+00:00
Rai, Mahesh 21 Reputation points
2 answers

Azure Application Gateway /WAF v2 provisioning keeps failing

Hi All, We are trying to provision an App Gateway (WAF v2) in a dedciated VNET which is peered with the Transit/Hub Vnet, However the App Gateway provisioning keeps failing with below error "code": "Conflict", "message":…

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Web Application Firewall
asked 2020-08-20T21:46:10.2+00:00
Karthik Chowdary Namburu 1 Reputation point
commented 2020-08-26T20:28:22.613+00:00
TravisCragg-MSFT 5,696 Reputation points Microsoft Employee Moderator
1 answer One of the answers was accepted by the question author.

Azure Applicatin Gateway Standard V1 to WAF V2 directly

Hi Experts, I have few existing applications on Standards V1 and we would like to migrate to WAF V2. Is there any way to directly move to WAF V2.

Azure Web Application Firewall
asked 2020-08-10T05:23:08.597+00:00
CloudArch 41 Reputation points
accepted 2020-08-10T18:03:11.77+00:00
CloudArch 41 Reputation points
1 answer One of the answers was accepted by the question author.

Azure WAF V1 to WAF V2 Migration

Hi Experts, I have few existing applications on WAF V1 and we would like to migrate to WAF V2. Is there any way to directly move to WAF V2.

Azure Web Application Firewall
asked 2020-08-10T05:21:53.11+00:00
CloudArch 41 Reputation points
accepted 2020-08-10T05:33:17.047+00:00
CloudArch 41 Reputation points
1 answer

Server firewall setting log

i need to log who is added client ip i firewall setting

Azure Web Application Firewall
asked 2020-07-29T11:16:10.727+00:00
Sameh Gamal 1 Reputation point
commented 2020-08-06T11:28:13.973+00:00
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator
1 answer

SignalR and the WAF in Application Gateway

If I host a Blazor server side website in Azure using an App Service and the Azure SignalR service, and in front of this website there is the Azure Application Gateway. Will the SignalR packages go through the WAF? Plus will the WAF be able to detect…

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Web Application Firewall
asked 2020-07-17T08:12:31.51+00:00
Peter 6 Reputation points
answered 2020-08-05T01:48:42.067+00:00
TravisCragg-MSFT 5,696 Reputation points Microsoft Employee Moderator
1 answer

What is not working across two different Azure Subscriptions?

Hi People, We have multiple different objects spread across multiple different Azure Subscriptions like below: Development-AzSubscription ApplicationGateway\AppGW-Dev1 ApplicationGateway\AppGW-Dev2 ... Testing-AzSubscription …

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
775 questions
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
782 questions
Azure Event Hubs
Azure Event Hubs
An Azure real-time data ingestion service.
722 questions
Azure Web Application Firewall
asked 2020-07-13T06:29:40.767+00:00
EnterpriseArchitect 6,061 Reputation points
commented 2020-07-20T10:54:59.537+00:00
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator
2 answers One of the answers was accepted by the question author.

WAF setup reverse proxy

Hi, Can we setup reverse proxy, Level 2 bridge mode on Azure WAF?

Azure Web Application Firewall
asked 2020-06-23T18:41:32.147+00:00
Ashu_clouddev 101 Reputation points
accepted 2020-07-09T06:10:20.247+00:00
Ashu_clouddev 101 Reputation points
2 answers One of the answers was accepted by the question author.

WAF related questions and Compliance

Hi, My questions on Azure WAF support on below - 1) Does WAF support TACACS, SAML, AAD, LDAP , Kerberos, RADIUS ? 2) Compliance GDPR, Sarbanes-Oxley, HIPAA, PCI-DSS, SOC2 3) Is there any to test WAF with in the Azure with all the imposed rules such…

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,217 questions
Azure Content Delivery Network
Azure Web Application Firewall
asked 2020-06-23T11:48:16.403+00:00
Ashu_clouddev 101 Reputation points
accepted 2020-07-08T05:08:03.92+00:00
Ashu_clouddev 101 Reputation points