Azure Web Application Firewall
An Azure service that provides protection for web apps.
316 questions
In "Application Gateway WAF policy" resources cannot select "Rate limit" rule type in custom rules. Only "Match" available.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 52%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Alex Vasiuk
0
Reputation points
Hi,
In "Application Gateway WAF policy" resources cannot select "Rate limit" rule type in custom rules. Only "Match" available.
I want to configure rate-limit rules in my WAF for Application Gateway. I have a bunch of "Match" custom rules that work great. But when I to follow the official doc I fail, because there is no "Rate limit" in my radio button.
I run diagnostics in Azure Portal for this resource, but nothing came up.
Happy to any help!
Best Regards,
Alex.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT 25,841 Reputation points Microsoft Employee2024-09-06T03:36:34.8+00:00 Thank you for reaching out.
Can you share a screenshot of the custom rule page here? I was not able to reproduce the issue on my end.
-
Alex Vasiuk 0 Reputation points
2024-09-10T13:45:48.8966667+00:00 Hey @chaitanyanaykodimsft-9638, here is the screenshot.
I will try to run the request via cli and see what happens.
Best Regards,
Alex.
-
Alex Vasiuk 0 Reputation points
2024-09-12T07:43:23.9366667+00:00 Hi,
I tried with the cli and it gave me the answer:
az network application-gateway waf-policy custom-rule create --policy-name <REDACTED> --resource-group <REDACTED> --action Block --name ClientIPRateLimitRule --priority 90 --rule-type RateLimitRule --rate-limit-threshold 100 --group-by-user-session '[{'"groupByVariables"':[{'"variableName"':'"ClientAddr"'}]}]' (ApplicationGatewayFirewallCustomRuleRateLimitUnsupportedManagedRuleSet) Custom Rule ClientIPRateLimitRule of type RateLimitRule and in context properties.customRules[3] is not supported with the current Managed Ruleset version. Use OWASP_3.2 or above. Code: ApplicationGatewayFirewallCustomRuleRateLimitUnsupportedManagedRuleSet Message: Custom Rule ClientIPRateLimitRule of type RateLimitRule and in context properties.customRules[3] is not supported with the current Managed Ruleset version. Use OWASP_3.2 or above.So after I updated managed rule set from OWASP_3.0 to OWASP_3.2 I managed to configure rate limit custom rules. I think the main issue here is that it is not obvious from the Azure Portal Web UI that OWASP should be updated to use Rate-limit.
Best Regards,
Alex.
Sign in to comment
Sign in to answer