An Azure service that provides protection for web apps.
Getting "ApplicationGatewayFirewallNoRedisCacheRateLimitUnsupported" when I deploy. Which regions actually support this feature?
The organization where I work are attempting to diversify from North and West Europe. When attempting to deploy to Denmark East as a test, I'm getting the error "ApplicationGatewayFirewallNoRedisCacheRateLimitUnsupported", from which I…
Azure Web Application Firewall
Front Door WAF rate-limit rule: groupBy 'None' rejected with "allowlisted for Developer Preview" error
I'm deploying an Azure Front Door Standard WAF policy via Bicep (Microsoft.Network/FrontDoorWebApplicationFirewallPolicies@2024-02-01, sku Standard_AzureFrontDoor) with a RateLimitRule custom rule that uses groupBy: [{ variableName: 'None' }] to share…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure Application Gateway WAF – Rule 930120 (OS File Access Attempt) exclusion not working for JSON body key, even after confirming policy binding
Environment Azure Application Gateway v2, WAF_v2 SKU WAF Policy: Managed Rules, Microsoft_DefaultRuleSet version 2.1 Backend: Keycloak Admin Console (/admin/realms/{realm}/ui-ext endpoint), request body is application/json Diagnostic logs via…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
AI answer
Traffic Block OutSide Canada
I have created WAF rule that traffic allowed only from Canada, block rest of the country. Still we are getting traffic from outside countries, especially from US.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure WAF JSChallenge- SameSite=Strict cookie breaks replay POST mechanism
The Application Gateway WAF JSChallenge feature sets the appgw_azwaf_jsclearance cookie with SameSite=Strict, which prevents the cookie from being sent on the replay POST after challenge completion. This causes users to see a 403 error after successfully…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Inconsistent Geo-blocking Behavior in WAF Policies with Prevention Mode
We have experienced inconsistent behavior between Application Gateway WAF Policies that were provisioned at different times and in different methods--e.g., manually in the Azure Portal or via Terraform--but are otherwise identically configured. Both are…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure Application with WAF SKU return error 500 after WAF is enabled
My application is hosted behind Azure Application Gateway WAF and uses a legacy Thai character encoding (Windows-874) in query string parameters. The application has been working successfully since the beginning of the app gateway provisioning and the…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF custom rule for rate limiting only blocking every other request once limit is reached.
This is the rule that is being applied: This is an example of the output: Notice that the status codes alternate between 401 and 429. The rule is kicking in but does not persist. There are other articles that indicate others are observing this…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Geo location rule not working as expected
I HAVE GEO LOACTION BLOCK RULE IN WAF TO BLOCK NON-US traffic ,but it is blocking US ip address also
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Need JA4 enabled on our Front Door WAF
How do we Enable JA4 / ClientFingerprint feature flag? I turned on Developer support but that only pushed me to post here/.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Enable JA4 / ClientFingerprint feature flag
I need to submit a ticket to enable the JA4 fingerprint feature on my Front Door WAFs
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WebApplicationFirewallPolicy validation failed. Subscriptions without DeveloperPreview flag enabled cannot use Microsoft_DefaultRuleSet_2.2
Attempting to create or update WAF premium policy with DRS 2.2 and I get the error in title. I cannot find what feature to register either in the portal or in powershell/CLI - Nothing references DefaultRuleSet.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Rest API reference document for application gateway WAF was missing
My customer need to update/create their WAF rule using REST API. Previously there is the reference document…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
How to enable JA4 feature for Azure FrontDoor WAF?
Bicep template mentioned JA4 matchVariable is available. https://learn.microsoft.com/en-us/azure/templates/microsoft.network/frontdoorwebapplicationfirewallpolicies?pivots=deployment-language-bicep#matchcondition However, it returns "Operator…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF Rule Exclusion Not Working for FIX Rule Group Rule 943110 in Microsoft_DefaultRuleSet_2.1
Hi Community, I have configured a rule exclusion on our Azure Front Door WAF policy but the rule continues to fire despite the exclusion being in place for several hours. Looking for help understanding if this is a known limitation or a bug. Setup: …
Azure Web Application Firewall
An Azure service that provides protection for web apps.
google web bots deny by microsoft waf
We are getting reports that google web crawlers are getting blocked by azure waf. I am not seeing anything blocked in the logs although google is claiming it is being blocked. The web crawler testing yeilds that google crawler is allowed although from…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Intermittent IPv6 Connection Hangs/Timeouts to Azure Front Door Endpoints (t-msedge.net) on Windows 11 and Linux
I am experiencing consistent connectivity issues when accessing websites hosted on the Microsoft Azure edge network (specifically endpoints like part-0016.t-0009.t-msedge.net) over IPv6. The connection hangs indefinitely during data transfer, while IPv4…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
How to restrict /admin path access to VPN users while keeping the rest of the application publicly accessible?
I have an application hosted behind an Azure Application Gateway with WAF enabled and accessible through a public domain. The requirement is: The main application (e.g., https://example.com) should be accessible to everyone on the internet. The…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Allow ICMP over Azure APPGW - Firwall
Hello colleagues, We are using an Internet breakout solution which looks like below: Internet > AzureFw > Azure APPGW > LB > IPS > Azure vnet that contains Backends on which WebApps are being hosted, one of this applications for…
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Multipart request body failed strict validation and Failed to parse request body while trying to upload files using multi-formdata
Trying to upload a file using the below code var multipartContent = new MultipartFormDataContent { { new StringContent("hrishi"), "createdBy" }, { new StringContent("hrishi"),…
Azure Web Application Firewall
An Azure service that provides protection for web apps.