Learning Azure with Ofek ☁️ Episode 1 What Is WAF and Why Should You Care?

Welcome to Learning Azure with Ofek—a series where we explore the essential tools, services, and best practices in Microsoft Azure, in a simple and practical way.

In this first episode, we’re diving into WAF.

Ever heard of the term WAF? Let’s break it down together and understand why it’s such a powerful security layer for your apps and websites.

When it comes to protecting your web assets, WAF (Web Application Firewall) provides centralized protection. Beyond individual resource security, a WAF adds a smart, scalable layer that detects and blocks common vulnerabilities like SQL Injection and XSS (cross-site scripting) across your entire app.

Another key role of a WAF is protecting against crawlers—automated bots that roam the internet gathering information.
• A “good” crawler (like Google) indexes your site for search results, respects your site rules, and ignores areas you’ve marked as private.
• A “malicious crawler”, however, scans the web looking for sensitive data, security loopholes, and organizational vulnerabilities.

From my experience, Azure makes deploying WAF even easier. You can integrate it with services like Azure Application Gateway, Azure Front Door, and Azure CDN—each tailored for different use cases.

In the image below, you can see how WAF works with Application Gateway at Layer 7 (L7), protecting the environment from web-based threats and securely routing requests to server pools like Site1 and Site2.

So instead of stressing over every little threat—give WAF a serious look. It might just save your environment.