WAF rule create for blocking any traffic no matching our external gateways IPs, I have associated to an application gateway however the traffic from the internet still allowed

Juan Perez 0 Reputation points
2024-07-24T09:00:25.3533333+00:00

Try to limit the traffic reaching our newly created application gateway, the site is up and running, but reachable from the whole internet, tried to add a WAF and control the traffic

Even with the configuration below the whole internet got access to the app, what am I doing wrong?

WAF

Associated Application Gateway Linked

  • AllowTrafficRule
  • Enabled: Tick
  • Rule type: Match
  • Priority: 10
  • Conditions
    • If
      • Match Type: IP address
      • Operation: Does not contain
      • IP Address or Range:
        • ourpublicip1/32
        • ourpublicip2/32
    • Then: Deny Traffic
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,011 questions
0 comments No comments
{count} votes