93 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
44
views
Azure WAF Allow by Domain or Subdomain
I have an Azure Application Gateway, it has a WAF policy attached that has a subset of network CIDRs ( for our offices ) - which works perfectly. We have an application(App B) that will be deployed ...
0
votes
0
answers
112
views
Issue adding default ruleset to Azure WAF Policy for Azure Front Door Premium
I am trying to create a WAF Policy and assign it the Microsoft_DefaultRuleSet 2.1. I am using Azure CLI 2.76,0
I am getting this error:
(BadRequest) WebApplicationFirewallPolicy validation failed. ...
0
votes
1
answer
331
views
Allow a custom content-type in Azure Front Door WAF without bypassing rules
We have an application that uses application/merge-patch+json extensively for PATCH requests. When it is deployed behind Azure Front Door, the firewall complains that the content type is not allowed ...
-1
votes
1
answer
425
views
Terraform deployment of Azure WAF custom rules - erroring with ApplicationGatewayFirewallMatchValueNoCollection
I'm trying to create custom WAF rules to allow traffic to specific URI's - this deployment is being done via Terraform.
The error I'm getting is:
Application Gateway Web Application Firewall Policy ...
-1
votes
1
answer
446
views
Terraform Azure Application Gateway associated WAF policy - add multiple rule override IDs
My question is - How do I create a rule exclusion (override) for a WAF policy that's associated to an Application Gateway that has multiple rule IDs in Terraform?
I've created a dynamic rule for my ...
1
vote
0
answers
112
views
How to prevent `.svc` from being detected by WAF in WCF (.NET 4.8) implementation?
I have a WCF client application running on .NET Framework 4.8, and I've implemented custom headers using a message inspector (IClientMessageInspector) to work around WAF (Web Application Firewall) ...
0
votes
0
answers
93
views
Unable to add custom rule programmatically for Azure Front Door WAF policy
I am using following code add the custom rule. I am getting success message. But, custom rule is not being added to the policy. Please let me know if I miss something.
I see that there is no ...
0
votes
1
answer
66
views
Azure Application Gateway Client Requests Routing
For Azure Application Gateway with WAF enabled, does client requests filtered on WAF or NSG first?
-1
votes
1
answer
220
views
Force Replacement in azurerm_cdn_frontdoor_security_policy terraform
I am running terraform code to provision the Security policy to associate in WAF in Azure Front Door
MY issue is when i add new end_points under each domain terraform making force change in all ...
0
votes
0
answers
61
views
Automating WAF policy Azure App GW handling
We use the Application Gateway as reverse proxy for both internal and external websites. Network request exceptions often need to be made for different environments, and these are handled by the WAF. ...
0
votes
1
answer
92
views
Same Certificate two WAF Listeners, Azure WAF, Bicep For Loop
Parameters File
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters&...
0
votes
1
answer
817
views
Azure WAF exclusion, what's the difference between RequestArgNames and RequestArgValues?
I'm reading the docs and I just can't understand what's the difference between the match variables RequestArgNames and RequestArgValues.
Just by looking at the table, those two match variables seem to ...
0
votes
1
answer
243
views
Web Application Firewall Policies - Create Or Update
I use this API from microsoft:
https://learn.microsoft.com/en-us/rest/api/application-gateway/web-application-firewall-policies/create-or-update
{
"location": "westus",
"...
0
votes
1
answer
89
views
SendGrid wehbook events do not have "Accept" header
We have integrated SendGrid into our project to send emails, and for logging purposes, we configured one of our application endpoints in SendGrid's webhooks to receive events related to the emails we'...
0
votes
2
answers
253
views
Azure waf custom terraform configuration is throwing error for match_variables
I'm adding waf configuration to avoid when ever "--BEGIN PUBLIC KEY---" is matching but terraform is throwing error about some required options
name = "example-...