Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
Issue with enterprise app, application proxy
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 49%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENN%3C/text%3E%3C/svg%3E)
Nandakumar Natarajan
0
Reputation points
Hi,
The request from application proxy is not reaching the internal app when "translate URLs in Headers" is unchecked. We wanted to keep the original host header to retain the public domain name while processing the request in internal app.
Appreciate any help on this.
With Regards,
Nanda
Microsoft Security | Microsoft Entra | Microsoft Entra ID
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 51%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bandela Siri Chandana 3,075 Reputation points Moderator2025-04-29T19:51:35.5533333+00:00 Hi @Nandakumar Natarajan
I understand that request from application proxy is not reaching the internal app when "translate URLs in Headers" is unchecked and you wanted to keep the original host header to retain the public domain name while processing the request in internal app.When you uncheck the "Translate URLs in Headers" setting, the original host header is preserved in the request. This can be useful when you want to retain the public domain name while processing the request in the internal app.
To resolve this issue and ensure that the request reaches the internal app with the original host header, you should keep the "Translate URLs in Headers" setting selected. By enabling this setting, the Application Proxy will use the FQDN in the internal URL for routing the actual traffic, while still preserving the original host header.
Here are the steps to enable "Translate URLs in Headers":
- Go to your Azure portal and navigate to the Azure Active Directory Application Proxy settings.
- Find the setting for "Translate URLs in Headers" and make sure it is selected or set to "Yes".
By following these steps and keeping the "Translate URLs in Headers" setting enabled, you should be able to ensure that the request from the Application Proxy reaches the internal app with the original host header intact.
Follow the document for more information: https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-configure-hard-coded-link-translation
Hope this helps. Do let us know if you have any further queries.
-
Bandela Siri Chandana 3,075 Reputation points Moderator
2025-04-30T18:48:01.8466667+00:00 Hi @Nandakumar Natarajan
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back. -
Bandela Siri Chandana 3,075 Reputation points Moderator
2025-05-02T18:54:43.79+00:00 Hi @Nandakumar Natarajan
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back. -
Nandakumar Natarajan 0 Reputation points
2025-05-05T04:30:44.23+00:00 Hi Siri,
Thanks for the response.
As mentioned in my initial query, our goal is to preserve the original public domain name in the host header. According to Azure documentation, unchecking the "Translate URLs in Headers" option should preserve the original host header. However, in our case, this does not appear to be working as expected.
When this setting is unchecked, the request fails to reach the internal application and results in the error: "no response from internal application." This behavior suggests that the request is either being dropped or misrouted.
Could you please help us confirm whether this is a known issue or if there are additional configuration steps required to achieve the intended behavior?
With Regards,
Nanda
-
Bandela Siri Chandana 3,075 Reputation points Moderator
2025-05-06T16:42:37.62+00:00 Hi @Nandakumar Natarajan
I understand that when the "Translate URLs in Headers" option is unchecked in Azure Application Proxy, the request should maintain the original host header (the public domain name). The request should still be forwarded to your internal application correctly, with the originalHostheader intact.However, based on your description, the request is failing with the error "no response from internal application**,"** which likely suggests that the internal application isn't receiving the request correctly or it is being misrouted.
1.Ensure your app is set up to handle the original
Hostheader.2.Double-check that all proxy settings are correct, and review logs for any errors.
3.Ensure the internal application is reachable by Azure Application Proxy and check for firewall/network issues.
Hope this helps. Do let us know if you have any further queries.
-
Nandakumar Natarajan 0 Reputation points
2025-05-09T11:48:38.22+00:00 Hi Siri,
Yes, we double checked and here is the detail.
Enabled (Translate URLs in Headers) - Request reaches the interal app.
Disabled (Translate URLs in Headers) - Request does not reach the interal app.
With Regards,
Nanda
-
Bandela Siri Chandana 3,075 Reputation points Moderator
2025-05-09T13:52:08.8733333+00:00 Hi @Nandakumar Natarajan
Can you please share the configuration details for application and application proxy in private message and also please share the network traces while you are reaching the internal app.Follow the document: How to collect a network trace | Microsoft Learn
Hope this helps. Do let us know if you have any further queries.
Sign in to comment
Sign in to answer