Forum Discussion

pavanpavuluri's avatar
pavanpavuluri
Copper Contributor
May 05, 2021

Implementing Firewall for function apps with inbound HTTPS traffic

Hi Team,   We are looking to implement an Azure Firewall for filtering Inbound HTTPS traffic to Azure Function Apps hosted in premium App service plan. Is it possible to use Azure Firewall for this...
ibnmbodji's avatar
ibnmbodji
Iron Contributor
May 20, 2021

pavanpavuluri 

 

Hi   

Azure Firewall operate at layer 4 while  WAF operate at layer 7 . Since you want to filter   https traffic WAF is more suitable . 

You can also find in the FAQ this :  

Does Azure Firewall support inbound traffic filtering?

Azure Firewall supports inbound and outbound filtering. Inbound protection is typically used for non-HTTP/S protocols. For example RDP, SSH, and FTP protocols. For best inbound HTTP/S protection, use a web application firewall such as Azure Web Application Firewall (WAF).

 

Ref: https://docs.microsoft.com/en-us/azure/firewall/firewall-faq

cloudtrooper's avatar
cloudtrooper
Icon for Microsoft rankMicrosoft
May 20, 2021
That is not entirely correct, AzFW Premium with features such as TLS Inspection or IDPS operates at layer 7 as well
  • ibnmbodji's avatar
    ibnmbodji
    Iron Contributor
    May 20, 2021

    I'm only referring to Azure Firewall not premium because it's still in preview ( correct me if i'm wrong) and then not recommended for production use . Even if it operates at layer 7 i don't get the point to use a firewall instead of WAF unless you tell me that it can protect from top 10 OWASP vulnerabilities and provide Load balancing options as application gateway do.

Resources