Forum Discussion

Admin O365's avatar
Admin O365
Brass Contributor
Jan 21, 2021
Solved

Is Application Gateway enough for PaaS based HTTPS enabled application

Hello folks,

 

We are planning to deploy Web app in Azure and checking as what is the latest option to take care of Vulnerability besides Firewall level security.

 

Is Application gateway in front of the Web Apps enough or do I need to factor Azure Front Door?

 

  • Admin O365 

     

    Hi  it depend of your routing and availability requirement 

    If your application don't need to be deployed cross region you can go with application gateway +waf which provide protection against Top 10 Owasp vulnerabilities .

     

    In the documentation it is mentionned : 

    While both Front Door and Application Gateway are layer 7 (HTTP/HTTPS) load balancers, the primary difference is that Front Door is a global service whereas Application Gateway is a regional service. While Front Door can load balance between your different scale units/clusters/stamp units across regions, Application Gateway allows you to load balance between your VMs/containers etc. that is within the scale unit.

    Frequently asked questions about Azure Application Gateway | Microsoft Docs

    Azure Front Door - Frequently Asked Questions | Microsoft Docs

3 Replies