Azure Web Application Firewall
An Azure service that provides protection for web apps.
326 questions
Requesting Assistance to Resolve the issue with azure WAF rule 942440
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 7.000000000000001%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVL%3C/text%3E%3C/svg%3E)
Vipul Laxmikant Redkar
0
Reputation points
Hi Team,
We have hosted the application on the Azur server using the app gateway and also applied WAF provisions. However, we are facing the issue below. The application's host needs assistance solving the rules to load the application URL.
ruleSetVersion_s: 942440 and 949110
ruleSetVersion_s: 3.2
requestUri_s: /assets/plugins/global/plugins.bundle.js?v=1XPYiGzJm36asvv-4F024b79abIm121b5OBJU6--LuY?v=1XPYiGzJm36asvv-4F024b79abIm121b5OBJU6--LuY
OperationName: ApplicationGatewayFirewal
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 81%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sai Prasanna Sinde (Quadrant Resource LLC) 680 Reputation points Microsoft Vendor2024-10-16T09:59:52.1333333+00:00 Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
We appreciate you asking this question here. We will get back to you as soon as we have investigated it.
Thanks,
Sai.
-
Sai Prasanna Sinde (Quadrant Resource LLC) 680 Reputation points Microsoft Vendor
2024-10-17T02:37:59.6933333+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
- As the rule 949110 is a mandatory rule, so that cannot be disabled, and which gets triggered when the anomaly score meets the threshold. For your reference: https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules?tabs=drs21#anomaly-scoring
- There might be a chance that the 942440 rule is affecting the Anomaly score to increase.
- If you feel it is a false positive one you can disable it or create an exclusion list or else create a custom rule.
- As per the document the rule 942440 is replaced by MSTIC rule 99031002.
Kindly let us know if the above helps or you need further assistance on this issue.
Thanks,
Sai Prasanna.
- As the rule 949110 is a mandatory rule, so that cannot be disabled, and which gets triggered when the anomaly score meets the threshold. For your reference: https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-crs-rulegroups-rules?tabs=drs21#anomaly-scoring
-
Sai Prasanna Sinde (Quadrant Resource LLC) 680 Reputation points Microsoft Vendor
2024-10-18T00:54:51.8533333+00:00 Greetings!
Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.
Thanks,
Sai.
Sign in to comment
Sign in to answer