Azure Web Application Firewall adds better web application security to layer 7 Azure Application Gateway service and is available in all Azure public regions.
Questions tagged [azure-waf]
72 questions
0
votes
1 answer
Setup WAF for App Services without Application Gateway
I am searching for a way to enable WAF for my App Services but I don't want to use Application Gateway instead I am wondering if it is possible to configure WAF in the app services itself. Need some help on this.
samssagar
- 1
- 4
0
votes
0 answers
What is the maximum number of conditions in Azure WAF custom rule?
I need to block many IPs in WAF custom rule, what is the maximum number of conditions (each condition matches a single IP address) in Azure WAF?
NOP-MOV
- 792
- 2
- 8
- 28
0
votes
1 answer
doesn't Azure AppService with WAF (non-isolated) still remains publicly accessible?
Assuming I'm using non-isolated app service, the recommendation to protect web app against ddos kind of attack is to put firewall in front of it. My Question:
Even if I have done following:
App Service (IP configured to allow WAF IPs only) -- WAF…
rahulga
- 23
- 2
0
votes
1 answer
Is there a way to capture WAF policy changes at the GUI level and then use that to trigger azure pipeline?
I am working to deploy an Azure WAF policy from Azure Repo. I have configured my AzureDevops pipeline that upon commit of a changes to WAF policy or its parameters file it will deploy the new waf policy to a specified environment. This was pretty…
ACloud_Learner
- 1
- 3
0
votes
1 answer
May AD FS in Azure be protected by App Gateway or WAP server is required?
I have an AD FS server in a VM in Azure for test purpose. It is not for production and some downtime does not matter.
However it should be available on the Internet for SSO.
Can Azure App Gateway be used for protection of AD FS?
Or is the Web…
Michael Chudinov
- 2,620
- 28
- 43
0
votes
1 answer
Maximum Character allowed in Query string of WAF
Currently my WAF is blocking my query strings because of long query strings. Is there a way for WAF to allow long query strings? Otherwise what is the limit in characters that is allowed in the query string? If my query string is around 8k…
weewoo
- 135
- 1
- 5
- 10
0
votes
2 answers
How to change order Listener in Azure Application gateway
In Azure Application gateway, you can associate Listeners with the host name.
but, how to change the order of the listeners, since the choice is made in order.
Example:
Name: port host
listenet01 80
listenet02 80 …
Fabio De Carli
- 379
- 3
- 12
0
votes
1 answer
Forwarding request to Azure Application Gateway Backend Pool depending upon Incoming request header
I have the following Setup:
One Application Gateway with WAF V2.
Two backend pools (say Backend1 and Backend2).
Both backends have same Application but with different version (Say
V1 and V2).
I want the following scenarios to work:
If a request…
Fraxxx
- 114
- 1
- 11
0
votes
1 answer
How do determine Azure WAF rule that affect to my specific url
My request got 403 when access to url like this format
https://example.com/Test.aspx?param=https%3A%2F%2Fwww.test.com%2Fen-us%3F
I have read the document but I not sure which rule prevented my request.
Anyone can show me:
How do find exactly rule…
Ryan Nguyen
- 61
- 8
0
votes
1 answer
502 WAF to Appservice connection issue (domain name fails and Azure name passes)
When we call domain url, www.foo.com it gives 502 error
"502 - Web server received an invalid response while acting as a
gateway or proxy server."
But the technical url www.foo.azurewebsites.net is working fine.
How do we diagnose this?
Since…
Blue Clouds
- 7,295
- 4
- 71
- 112
-2
votes
1 answer
Do I need a WAF if I have a VPN?
Do I really need a layer 7 Firewall if I change the architecture to use a VPN? If our clients connect to our services via a VPN, surely that would save costs of a WAF? Or am I missing something?
houba
- 496
- 7
- 20
-2
votes
1 answer
Web application firewall (WAF) rules validation by javascript
WAF Rules applied to web application which is already developed. To overcome WAF blocking inputs , need to convert format of input or encode input before form submitting got failed. If any possibility to validate WAF rules using javascript , pls…
Udhayavanan
- 1
- 1