An Azure service that provides protection for web apps.
Intermittent IPv6 Connection Hangs/Timeouts to Azure Front Door Endpoints (t-msedge.net) on Windows 11 and Linux
I am experiencing consistent connectivity issues when accessing websites hosted on the Microsoft Azure edge network (specifically endpoints like part-0016.t-0009.t-msedge.net) over IPv6. The connection hangs indefinitely during data transfer, while IPv4…
Azure Web Application Firewall
How to restrict /admin path access to VPN users while keeping the rest of the application publicly accessible?
I have an application hosted behind an Azure Application Gateway with WAF enabled and accessible through a public domain. The requirement is: The main application (e.g., https://example.com) should be accessible to everyone on the internet. The…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF custom rule for rate limiting only blocking every other request once limit is reached.
This is the rule that is being applied: This is an example of the output: Notice that the status codes alternate between 401 and 429. The rule is kicking in but does not persist. There are other articles that indicate others are observing this…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Allow ICMP over Azure APPGW - Firwall
Hello colleagues, We are using an Internet breakout solution which looks like below: Internet > AzureFw > Azure APPGW > LB > IPS > Azure vnet that contains Backends on which WebApps are being hosted, one of this applications for…
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Multipart request body failed strict validation and Failed to parse request body while trying to upload files using multi-formdata
Trying to upload a file using the below code var multipartContent = new MultipartFormDataContent { { new StringContent("hrishi"), "createdBy" }, { new StringContent("hrishi"),…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WebApplicationFirewallPolicy validation failed. Subscriptions without DeveloperPreview flag enabled cannot use Microsoft_DefaultRuleSet_2.2
Attempting to create or update WAF premium policy with DRS 2.2 and I get the error in title. I cannot find what feature to register either in the portal or in powershell/CLI - Nothing references DefaultRuleSet.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Issue with IP Whitelisting Configuration in Azure Front Door
We are using a web application with Azure Front Door service and are trying to implement IP whitelisting. Unfortunately, the setup is not functioning as expected. We need assistance in troubleshooting and fixing this issue. Please provide support as soon…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure WAF AllowFrontDoor stuck at "pending"
Hello Azure Support, I hope all is well. We are unable to create an Azure Front Door WAF policy in our subscription. The subscription feature Microsoft.Network/AllowFrontdoor remains in Pending for >36 hours, and WAF policy creation fails with a…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Is it possible to allow multiple cookies in a custom rule in Frontdoor WAF?
Hi. Like the title says. We have now a bunch of cookies that we need to allow through the WAF. We have solved this with exclusions for now, but I would like to move them to custom rule(s) to try and clean up the exclusion a bit. Is it possible to…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure Front Door WAF custom rules inconsistently applied - IP whitelist bypassed intermittently despite correct configuration
Problem Summary: We have configured custom IP whitelist rules in our Azure Front Door WAF policy, but they are being applied inconsistently. Access to our domain works intermittently from the same whitelisted IP address - sometimes returning HTTP 200…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
SSL Import Error on Application Gateway LB
Hello, I wanted to add SSL to the Application Gateway I created. I exported the SSL certificate using a p7b file and uploaded the root certificate, intermediate certificate, and regular certificate. However, I received an error. The error image is below.…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure WAF false positive problems
Hi. Why does Azure WAF DRS 2.1 still have frequent false positives, and why hasn’t this been improved? thanks
Azure Web Application Firewall
An Azure service that provides protection for web apps.
How to block blacklisted resources in WAF (Azure Front Door / Application Gateway)?
Hi Team, I have a legacy java application (exposed site: https://japfd.centoso.com ) on WebLogic / Tomcat. We have identified two high-risky endpoints, unfortunately we cannot patch them in application side immediately: …
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure WAF exclude specific content-type header
Hi community, I am trying to make an exclusion for a ruleid which is triggered for [REQUEST_HEADERS:Content-Type:application/scim+json; charset=UTF-8]}. It seems pretty straightforward: Match on RequestHeaderValues contains: scim+json However the rule…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF does not block traffic based on IP address
Hi, I have a web app running on VMSS behind Application Gateway. Azure Firewall is front facing for that application gateway and domain name is also mapped with Azure Firewall public ip address. This domain name is configured as listener in…
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
azure custom waf rules disappeared
We have a set of custom rules in our waf. For some unknown reason after updating 1 rule, the entire custom rules were deleted. I checked activity logs, I did not find any delete operations. Anyone with a suggestion on where to check?
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF not allowing above 128KB file Upload
Hello Team, We have some scenario where we need to send large volume of data from Web UI (Front End) to the backend APIs for processing. Often, due to the nature of the business transaction, the data crossed the default limit set in WAF rule, 128KB. That…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure FD Premium w/ WAF Custom Exclusion Rule Not Working
I have an Azure Front Door Premium instance with a WAF in Prevention Mode and Enabled. I created a simple exclusion rule to block traffic coming from my ip address but it is not blocking the traffic. I tried creating a support request but it just kept…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF policy custom rule, for each condition, the limitation of match values
WAF policy custom rule, for each condition, the limitation of match values is 10 according to the document, but I can update through AzPowershell the match values to more than 10, will the match values that exceed the limit take effect?
Azure Web Application Firewall
An Azure service that provides protection for web apps.
How do I reduce the cost of a WAF to 0 without deleting it?
We are hibernating assets in Azure. How can I reduce the cost of a WAF to 0 without deleting it?
Azure Web Application Firewall
An Azure service that provides protection for web apps.