Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
963 questions
2 answers
One of the answers was accepted by the question author.
Azure Application Gateway - Firewall
Hi Q&A, If a specific IP adress is blocked by the APG firewall, how can it be whitelsted/removed from being blocked? One can find the IP adress in the log.
asked 2021-01-11T18:41:04.323+00:00
Nibbler
616
Reputation points
commented 2022-09-07T13:25:06.53+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 68%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVK%3C/text%3E%3C/svg%3E)
Vineet Kumar Gupta
161
Reputation points
0 answers
Azure Application Gateway Mutual authentication and client_certificate_verification server variable
Hi, I have mutual TLS enabled, but when client does not send any certificate then I get "400 Bad Request No required SSL certificate was sent" - that's ok. But, is it possible to use client_certificate_verification server variable to pass…
asked 2022-08-30T09:12:12.503+00:00
Bartosz Witkowski
1
Reputation point
commented 2022-09-07T05:03:33.133+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
0 answers
Application Gateway URL Masking Feature
Hi Everyone , I have a requirement to configure URL masking feature in Application Gateway . Is there any feature available in App Gateway Thanks Gopinath B
asked 2022-09-06T13:37:42.4+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 0%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG%3C/text%3E%3C/svg%3E)
Gopi
1
Reputation point
commented 2022-09-06T14:34:11.213+00:00
kilian goëtz
146
Reputation points
1 answer
403 forbidden response from private endpoint
Hello, I have one VNET with two subnets. One of these have a private web app with a private endpoint. The other one have an application gateway for load balancing and web application firewall. Nonetheless, i have an issue with my backend in…
asked 2022-09-02T13:32:59.227+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 74%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKG%3C/text%3E%3C/svg%3E)
KILIAN GOETZ
6
Reputation points
commented 2022-09-02T20:34:28.253+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
23,106
Reputation points Microsoft Employee
4 answers
WAF Mandatory rule blocking my user register using google or facebook is there any to disable mandatory rule ?
{ "timeStamp": "2021-01-29T11:03:40+00:00", "resourceId": "/SUBSCRIPTIONS/0000000000-0000000-0000000-000/RESOURCEGROUPS/resourcegroup/PROVIDERS/MICROSOFT.NETWORK/APPLICATIONGATEWAYS/WAF-GATEWAY", …
asked 2021-02-04T16:03:00.74+00:00
Jerin Joy
26
Reputation points
answered 2022-08-31T10:15:12.63+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 69%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Sergio Rivas
1
Reputation point
0 answers
Container apps can't be used as application gateway's backend?
Hi, i've tried to user container app as application gateway's backend with following steps 1. created a new vnet 2. create a new container app with step 1's vnet 3. create a application gateway on same vnet, and add backend…
asked 2022-08-25T06:52:32.703+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 96%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
cman
1
Reputation point
commented 2022-08-26T05:54:38.93+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
1 answer
Cannot access prometheus and grafana from browser
I have aks,appgw , sample webapp ,public ip deployed in azure. In aks I installed prometheus and grafana using helm. I can curl -L http:localhost.com:9090 (prometheus port -9090) in aks but can't access localhost:9090 in browser as my laptop and aks is…
asked 2021-08-15T01:12:10.25+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 10%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESY%3C/text%3E%3C/svg%3E)
Sandeep Yarashi
1
Reputation point
commented 2022-08-23T18:04:42.617+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 18%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sebastian Pacheco
136
Reputation points
1 answer
Internal Load Balancing solutions for Azure Cross region environment
Hello , I am trying to design a Geo redundant RDS infra for our Customers on Azure. This is an internal RDS infra only and I am trying to provide regional redundancy to Rdweb URL. As I studied none of the global load balancers like traffic…
asked 2022-08-19T20:18:03.827+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 88%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Abhijit Mukherjee
1
Reputation point
answered 2022-08-23T15:15:48.163+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
1 answer
[Virtual Gateway] Reverse Proxy over VPN
Hi folks, I finally set up my dream networking config so I don't have to expose my house's IP address. However, the cost is running up really fast and will blow the budget before the monthly refill... So I either chose the wrong things in Azure, or…
asked 2022-08-22T20:55:51.343+00:00
Lance
291
Reputation points MVP
answered 2022-08-23T08:00:06.373+00:00
Joe Carlyle
661
Reputation points MVP
1 answer
One of the answers was accepted by the question author.
Azure service availability
The mentioned link states 3 types of services ": https://learn.microsoft.com/en-us/azure/availability-zones/az-region Zonal services: A resource can be deployed to a specific, self-selected availability zone to achieve more stringent latency…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 60%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
1 answer
Exclude/exempt specific IP from WAF managed rules
Hi, I have an application hosted on Azure WAFV2, I need to define an exclusion using client IP address. Basically any request coming from that IP should not be examined against OWASP 3.2 managed rules. I tried defining exclusions but IP specific…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 72%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EW%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Query on mandated vnet peering when using internal IPs in backend pools
Hi, In the component basics section of documentation [1], it notes "If you use internal IPs as backend pool members, you must use virtual network peering or a VPN gateway. Virtual network peering is supported and beneficial for load-balancing…
asked 2022-08-18T16:08:55.447+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 81%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMD%3C/text%3E%3C/svg%3E)
Mease, Darren Thomas
86
Reputation points
commented 2022-08-19T07:53:09.047+00:00
Mease, Darren Thomas
86
Reputation points
2 answers
Exclude Website from WAF Policy
Hi There, I have an Azure Application Gateway with WAF Policy used to secure access for x of websites hosted on Azure VM. For one of those website I want to configure WAF exclusion, so the website just bypass the WAF. I found this article:…
asked 2022-08-17T16:11:18.227+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 37%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ2%3C/text%3E%3C/svg%3E)
JMN-2253
596
Reputation points
commented 2022-08-19T07:51:15.513+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
0 answers
Application gateway permit http traffic the first time
Hello , I just create a new AG v2 , I configure rule to redirect http to https and it works ,the problem is if i put a url with http the firt time it works ,but if i click on the website ,it redirects me to https. How can i do for redirecting…
asked 2022-08-16T20:50:09.48+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 25%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKK%3C/text%3E%3C/svg%3E)
KAMAL KADDOURY
1
Reputation point
commented 2022-08-18T12:02:08.25+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
0 answers
File download issue
We are not able to download file size more than 50 MB on app gateway V1. Can anyone help me on this?
asked 2022-08-17T11:11:19.39+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 90%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDD%3C/text%3E%3C/svg%3E)
Dheeman Das
41
Reputation points
commented 2022-08-18T02:28:59.56+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
1 answer
Aplication Gateway and HTTP compression
Hello, I want to know if Web Application Gateway supports HTTP compression in Azure?
asked 2022-08-15T20:51:42.207+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 24%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
DG001
346
Reputation points Microsoft Employee
answered 2022-08-16T04:38:57.16+00:00
Andriy Bilous
10,981
Reputation points MVP
1 answer
One of the answers was accepted by the question author.
I want to ask about Application Gateway Firewalllogs
Hello experts and community. My name is Lee and I am working as a security engineer. As for the phenomenon I am experiencing, I am building a process to collect logs by linking WAF Policy to the application gateway, but I do not know what the…
asked 2022-06-23T09:11:23.423+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 98%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EML%3C/text%3E%3C/svg%3E)
MinSeok Lee
21
Reputation points
accepted 2022-08-16T02:09:51.51+00:00
MinSeok Lee
21
Reputation points
0 answers
azure frontdoor origin health percentage is 0%
I configured azure app gateway as my origin and Health probe is also enabled. When I check the Origin health percentage metrics it is showing 0%. What may be the reason for it? How health probe works in terms of Application Gateway? If I have…
asked 2022-08-08T09:33:51.393+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 54%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGH%3C/text%3E%3C/svg%3E)
Gowda, Hariprasad
86
Reputation points
commented 2022-08-12T07:27:49.687+00:00
Gowda, Hariprasad
86
Reputation points
2 answers
How to convert and upload a wildcard SSL certificate chain to Azure Gateway
I have a wildcard ssl certificate chain for *.mydomain.one. The certificates are pem files and look like: Thawte RSA CA 2018.pem DigiCert Global Root CA.pem mydomain.one.pem With the following begin/ending: -----BEGIN CERTIFICATE-----…
asked 2022-08-03T10:16:10.84+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 66%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELW%3C/text%3E%3C/svg%3E)
Laurin Wandel
1
Reputation point
answered 2022-08-10T06:23:30.577+00:00
KapilAnanth-MSFT
35,581
Reputation points Microsoft Employee
1 answer
Problem_forward_taffic_from_Application_Gateway
I have configured an App gateway with 2 backend pools (stagingv&vproduction) each pool has 1 VM each VM has a public and private IP address. We have provided third parties companies with the public IP address of the APP gateway to white list we…
asked 2021-04-28T18:39:49.767+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 16%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBE%3C/text%3E%3C/svg%3E)
Bassam Elsayed
1
Reputation point
answered 2022-08-09T14:37:59.247+00:00
Joe Carlyle
661
Reputation points MVP