Forum Discussion
CyberSec
Sep 09, 2022Copper Contributor
Limit of WAF Exclusion
Hi, @camilamartins @tobiotolorin, All,
Based on the Link, https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#application-gateway-limits there is a limit of 40 exclusions per Application Gateway. But does it apply to the URI-based WAF policy as well? To explain more, we've 10+ applications Passing via application Gateway. The idea is to have a separate WAF policy for each application with Fine-tuning. We expect at least 10+ in each WAF policy (Applied at URI) does it add up to the application gateway, or if the limit applies to the policy set at the application gateway level?
Appreciate your inputs !
- algignacCopper Contributor"Need more exclusion lists than 40 for Application Gateway WAF" feature asked. please go vote : https://feedback.azure.com/d365community/idea/5d9498c0-539a-ec11-a81c-000d3adfb8f5
- CyberSecCopper Contributor
For anyone looking for the answer, 40 Exclusion includes URI as well.