Azure Application Gateway

Dedicated subnets

Are there any resources in the azure which requires dedicated subnet other than these:- Bastion,Firewall,Application Gateway,Active directory domain services. And why they require dedicated subnet? since because of autoscaling feature in them? If so,…

Http2 support for app gateway backend pools

We want to deploy a gRPC based webapp but can’t front it with app gateway as that can’t send http2 through to the backend are there any plans to support this scenario so we can have a scalable https2 based gRPC solution?

Azure AG WAF file upload

We need to upload a file with size is about 100MB and got blocked by Application Gateway WAF, we use the "file upload" method which is described here:…

Can I get support to configure azure WAF exclusions?

Please anyone can help me to configure the WAF exclusions in my Azure application gateway. Thanks, I appreciate any help that you can provide on this matter.

How to enable Streaming response for an App deployed on AKS?

Hi folks, Context: We have developed an App written FastAPI, which generates streaming response as the response is bigger in size. We have deployed this App in Azure Kubernetes Service. Application Gateway is configured as well for handling request and…

Application Gateway - With Https Listener

I have two app services that I use application gateway and route traffic to using URL Routing. For example: api1-app-service api2-app-service I use the Application Gateway with a custom domain in front of it, and route the traffic like this: …

Application Gateway don't able to use Key vault Certificate

Hi, I'm trying to use a certificate generated by key vault in one of my listeners, the problem is that when I add it and click on save, I get a notification saying: Failed to save configuration changes to application gateway 'XXXXX'. Error: Problem…

How to add VMSS as a backend target type using az cli command?

I am trying to update the backend with VMSS, but encountering this error: ERROR: (ApplicationGatewayBackendAddressMustHaveEitherFqdnOrIpAddress) Backend Address Pool newpassmetScaleSet-1723238703-backend must have either Fqdn or IpAddress…

Getting 403 forbidden error when enabling OWASP 3.2 and Enforce request body inspection limit

There is one function in my web site to download the documents also i have 182 rules Enabled in prevention (Mode)

Azure Application Gateway

Azure Application Gateway

An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.

1,031 questions

Sign in to follow

Azure Web Application Firewall

Azure Web Application Firewall

An Azure service that provides protection for web apps.

308 questions

Sign in to follow

Azure ISV (Independent Software Vendors) and Startups

Azure ISV (Independent Software Vendors) and Startups

Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.ISV (Independent Software Vendors) and Startups: A Microsoft program that helps customers adopt Microsoft Cloud solutions and drive user adoption.

92 questions

Sign in to follow

How to update properties (rewriteRuleSets) via bicep for existing resource (app gateway)

I want to update rewriteRuleSets for existing app gate way. How to update an existing resource via bicep I'm a beginer in this field so If possible, please give me an example resource appGateWay 'Microsoft.Network/applicationGateways@2024-01-01' existing…

Should the custom health probe (/adfs/probe) on the Azure Application Gateway be configured to use HTTP or HTTPS?

We are hosting an ADFS farm on Azure, including an external Application Gateway configured with two WAP servers in its backend pool. Currently, the health probe uses the HTTP protocol with the path /adfs/probe, as recommended by Microsoft. However, we…

Is there a known issue with conditional access lists

I have a client that had a conditional access policy allowing only certain countries to access their applications. About 1.5 hrs ago, this appears to have broken and most IPs are now being allowed only if "unknown" is selected.

How do I configure the Azure Application Gateway / backend pool to drop requests that are blocked by the WAF as the log file indicate the request was blocked but the script ends up in the database.

requests blocked by the WAF are being forwarded to the backend API servers. How do you configure the backend pool or WAF to drop requests that are blocked by the WAF.

Setting up Azure Function App with Azure Application Gateway (WAF)

Hello! I am currently trying to setup an Azure function application that will be accessed through an Application Gateway that restricts the network level access using the Azure WAF. I want to restrict the network level access by geographical location…

How to preserve the Client IP that is amended by Azure Front Door, another amendment by App Gateway before reaching Azure APIM

Hi, My setup is configured with Azure Front Door + Azure WAF --> Azure App Gateway + WAF --> Azure API Management. The diagnostic data logs are kept with Azure Monitor. I am trying to configure in bound throttling policy on APIM to rate limit user…

How to route request (connect) a pubic app service to a private app service via application gateway in azure

I have a simple webapplication with an Angular frontend and Javascript backend component. I deployed the backend as azure app services, made it private and used an application gateway to route requests to the backend API's. So whenever i access the…

Azure WAF rule 920470 blocking the requests with details massage: Pattern match ^[\w\d/\.\-\+]+(?:\s?;\s?(?:boundary|charset)\s?=\s?['"\w\d\.\-]+)?$ at REQUEST_HEADERS:content-type. But we excluded the rule like in the below snip still the rule blocking

Error: creating Application Gateway: polling after CreateOrUpdate: polling failed: the Azure API returned the following error: Status: "InternalServerError"

Error: creating Application Gateway: polling after CreateOrUpdate: polling failed: the Azure API returned the following error: Status: "InternalServerError"

WAF rule create for blocking any traffic no matching our external gateways IPs, I have associated to an application gateway however the traffic from the internet still allowed

Try to limit the traffic reaching our newly created application gateway, the site is up and running, but reachable from the whole internet, tried to add a WAF and control the traffic Even with the configuration below the whole internet got access to the…

Azure Application Gateway Access logs show 403 with ERRORINFO_NO_ERROR

I can see a lot of Application Gateway Access logs (200+ in the last 7 days) that show httpstatuscode_d as 403 and error_info_s as "ERRORINFO_NO_ERROR" when I fire the below query: AzureDiagnostics | where httpStatus_d == 403 and…