Share via

SignalR and the WAF in Application Gateway

Peter 6 Reputation points
2020-07-17T08:12:31.51+00:00

If I host a Blazor server side website in Azure using an App Service and the Azure SignalR service, and in front of this website there is the Azure Application Gateway. Will the SignalR packages go through the WAF? Plus will the WAF be able to detect any SQL injection attacks by examining the packages, like it can do for normal HTTP requests?

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,079 questions
Azure Web Application Firewall
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. TravisCragg-MSFT 5,681 Reputation points Microsoft Employee
    2020-08-05T01:48:42.067+00:00

    Application Gateway does support WebSockets, however the WAF for Application Gateway will typically block it by default. You will likely need to add an exclusion rule to allow the WebSocket connections.

    These rules will not be checked for SQL Injection attacks, so you might need additional protection in your application.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.