WAF in front of App proxy Apps

Question

Hello all,

In short we're publishing on-prem app using app proxy with MFA/SSO enabled. I'm not sure if we need to deploy additional WAF i.e Akamai Kona in front of the app proxy svc or does MS by default or under the hood enables WAF protection for the app proxy published apps?

would there be any benefits in adding our own WAF/DDoS ?

Many thanks

Answer 1

@Shamsta

Yes, applications published through Application Proxy are protected against Distributed Denial of Service (DDoS) attacks. This protection is managed by Microsoft and is automatically enabled in all our datacenters. The Azure DDoS protection service provides always-on traffic monitoring and real-time mitigation of common network-level attacks.

You can check this in below article,
https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-security#azure-ddos-protection-service

You can also go through below article that talks about security considerations for accessing apps remotely with Azure Active Directory Application Proxy
https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-security#azure-ddos-protection-service

Hope this answers your question.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.