Web Application Firewall with on-premise application

Question

My applications are on-premises servers, so I want to use Azure WAF, is this possible? if yes, should i connect a vpn or.
not.
Is there a way for my back-end to be an on-premise server?

Answer 1

Welcome to Microsoft Q&A Platform.

Application Gateway backend pools can contain:

• NICs
• Virtual machine scale sets
• Public IP addresses
• Internal IP addresses
• FQDN
• Multitenant backends (such as App Service)

Application Gateway backend pool members aren't tied to an availability set. An application gateway can communicate with instances outside of the virtual network that it's in. As a result, the members of the backend pools can be across clusters, across datacenters, or outside Azure, as long as there's IP connectivity.

More info: https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-components#backend-pools

In your case, if the backend is hosted in your private network onpremise you should use VPN (or Expressroute) allowing traffic between both ends.
If the backend is exposed to the Internet you can just use public IPs (or FQDN).

I hope this helps!

----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.