Part 1 - Lab Setup: Azure WAF Security Protection and Detection Lab

Published 01-14-2021 04:35 PM 4,158 Views
Microsoft

 

 

 

Tutorial: Setup an Azure WAF Security Protection and Detection Lab

 

 

 

The purpose of the Azure WAF security protection and detection lab tutorial is to demonstrate Azure Web Application Firewall (WAF) capabilities in identifying, detecting, and protecting against suspicious activities and potential attacks against your Web Applications.  This first tutorial in a four-part series walks you through creating a lab environment for testing against Azure WAF's protections.  This lab focuses on the OWASP protection ruleset and logging capabilities of Azure WAF.  The lab does not include advanced application security concepts and is not intended to be a reference for application security testing as these areas are broader than the use cases demonstrated herein.  For more information about each tutorial in this series, refer to the previous section, Tutorial Overview.

 

In this tutorial you will:

  1. Deploy a demo test environment in Azure
  2. Deploy Azure Monitor Workbook for WAF
  3. Enable desktop environment on Linux VM
  4. Create host file entries to resolve host names

 

 

Prerequisites

 

  1. An Azure subscription to deploy the Azure WAF Attack Testing Lab Environment Deployment Template
  2. A Log Analytics workspace to send all diagnostic logs
    • Azure Monitor Workbook for WAF deployed to the same workspace
  3. Familiarity with Azure Application Gateway WAF

 

 

Deployment Steps

 

  1. Click here to deploy the lab environment to your Azure subscription
  2. Click here to deploy the Azure Monitor Workbook for WAF to your Azure subscription
  • Tip:  For more information, refer to the detailed deployment instructions here - Deploying Network security demo environment
    • Please refer to the above document for deployment instructions only and do not use the deployment template linked in it.  The deployment template used in these lab tutorials is different from the one used in the deployment instructions document

 

 

Recommendations

 

We recommend using the Azure WAF Attack Testing Lab Environment Deployment Template as it already contains all the components needed for this lab including a customized version of the OWASP Juice Shop application.  The closer your lab is to the suggested lab setup, the easier it will be to follow the Azure WAF testing procedures.  After deployment and minimum configuration steps, you will be ready to perform actions with the suggested hacking research tools and review Azure WAF's protections against those malicious actions. 

 

When using the Azure WAF Attack Testing Lab Environment Deployment Template, additional resources such as VMs and Azure Front Door will be deployed.  The below diagram represents resources in the environment which are utilized in this lab.  The resources which are not used in this lab have been grayed out (VMs, Azure Front Door, DDoS Protection).

 

! IMPORTANT:  This environment will be used as the baseline for the remainder of this document and the tutorial

Mohit_Kumar_1-1609788007370.png

 

In this setup, traffic from the attacker machine (Kali VM) will be routed to the internet through the Azure Firewall.  Successful attack path is one where malicious data is sent directly by the attacker to the OWASP Juice Shop web application leading to successful exploitation.  Attack path defended by WAF represents the path where malicious data is inspected by Azure WAF (on Azure Application Gateway) and blocked with its out of the box ruleset before it reaches the web application.

 

You can also use a preexisting environment for this lab.  For completing these tutorials, your environment must have the following key components:

 

  1. An instance of the customized OWASP Juice Shop web application with an internet accessible endpoint
  2. An instance of Application Gateway with Azure WAF which publishes the OWASP Juice Shop web application to the internet
  3. An attacker machine (VM) with common hacking tools and internet connectivity.  We use Kali Linux as the attacker VM

 

If manually deploying the components required for this tutorial, your complete lab setup should look as similar as possible to the following diagram:

 

Mohit_Kumar_0-1609788486015.png

 

 

Resources

 

The below table details the resources needed from all resources deployed with the Azure WAF Attack Testing Lab Environment Deployment Template

 

Resource

Name

IP Address Type

Purpose

Virtual Machine

VM-Kali

Private only

Attacker VM (Kali Linux) with preinstalled vulnerability and penetration testing tools

Firewall

SOC-NS-FW

Private & Public

Azure Firewall for outbound and inbound traffic restrictions and inspection

Azure WAF on Application Gateway

SOC-NS-AG-WAFv2

Private & Public

Azure Web Application Firewall preventing threats to the OWASP web application published through Application Gateway

OWASP WebApp

owaspdirect-<deployment guid>.azurewebsites.net

Public only

OWASP Juice Shop Application.  An open source web application with built in security vulnerabilities and CFT challenges

! IMPORTANT:  For the scenarios demonstrated in this document, OWASP Juice Shop application was running on HTTP port 3000.  This is not the case when you use the Azure WAF Attack Testing Lab Environment Deployment Template as it configures the application to run on port 80, 443 and assigns it a URL.  For the lab tutorials, you will connect to the application on HTTP port 80 only.  The URL for the application will be http://owaspdirect-<deployment guid>.azurewebsites.net.  

 

  • Tip: As it is a security best practice, we strongly recommend that you change the default lab password after deployment

 

Configuration

 

Additional configuration is required on the Kali Linux VM before getting started on the lab exercises.  The Kali VM in this lab environment needs remote desktop environment installed and configured.  Please complete the steps in the order outlined below.

 

 

Updating Kali Linux and Installing Desktop Environment

 

  1. Launch PowerShell on your local machine and run the following command to connect to the Kali VM

 

ssh svradmin@<Public IP Address of Azure Firewall> 

<Type your password when prompted to login>

 

  • Tips:
    • You can find the public IP of Azure Firewall in the Azure Portal under Resource Group --> SOC-NS-FW --> Public IP configuration
    • You can also use Putty client on your local machine to connect to the Kali VM

 

  1. Once connected to the Kali VM with SSH, run the following command to update the Kali Linux distro

 

sudo apt-get update

<Type your password when prompted>

 

  1. Once the Kali Linux distro is updated, run the following command to install and configure the remote desktop server on the Kali VM

 

a. sudo apt-get -y install xrdp

b. sudo systemctl enable xrdp

c. echo xfce4-session >~/.xsession

d. sudo service xrdp restart

 

 

  1. Upon completing the abovementioned steps, you should be able to connect to the Kali VM over RDP on port 33892 

 

a. Connect to the Kali VM over RDP by using the following IP address and port combination

 

<Public IP Address of Azure Firewall>:33892 

 

b. When prompted to choose the setup for the first startup, click to select “Use default config”

 

Mohit_Kumar_0-1609793055165.png


c. You can now close your SSH session to the Kali VM by typing “exit” in the SSH session running in PowerShell

 

  1. Create an entry in the HOSTS file on Kali VM to map a name to the Public IP address of the OWASP Juice Shop site published on Application Gateway

 

a. Launch Terminal and run the following command

 

sudo nano /etc/hosts

<Type your password when prompted>

 

b. Create the following entry

 

Mohit_Kumar_0-1609794465822.png

 

c. Save the hosts file and exit

 

Use Ctrl+S to save and Ctrl+X to exit

 

  • Tip:  You can find public IP of the Application Gateway in the Azure Portal under Resource Group --> SOC-NS-AG-WAFv2 --> Frontend Public IP address

 

 

Next Steps

 

Before proceeding to the next tutorial, take a few mins to review the following

 

  1. OWASP Juice Shop publishing rule on Application Gateway
  2. Web Application Firewall configuration on Application Gateway
  3. Test connectivity to the OWASP Juice Shop website when accessing the application directly and when going to it through the Application Gateway

 

  • Tip:  You can find the public URL of the deployed Juice Shop app in the Azure Portal under Resource Group -->  owaspdirect-<guid> --> URL

 

 

 

Previous: Tutorial Overview

Next: Reconnaissance Playbook

 

 

 

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2030469%22%20slang%3D%22en-US%22%3EPart%201%20-%20Lab%20Setup%3A%20Azure%20WAF%20Security%20Protection%20and%20Detection%20Lab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2030469%22%20slang%3D%22en-US%22%3E%3CH2%20id%3D%22toc-hId--554604011%22%20id%3D%22toc-hId--554817252%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1932908822%22%20id%3D%22toc-hId-1932695581%22%3E%3CFONT%20size%3D%226%22%3ETutorial%3A%20Setup%20an%20Azure%20WAF%20Security%20Protection%20and%20Detection%20Lab%3C%2FFONT%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20purpose%20of%20the%20Azure%20WAF%20security%20protection%20and%20detection%20lab%20tutorial%20is%20to%20demonstrate%20%3CSTRONG%3EAzure%20Web%20Application%20Firewall%20(WAF)%3C%2FSTRONG%3E%20capabilities%20in%20identifying%2C%20detecting%2C%20and%20protecting%20against%20suspicious%20activities%20and%20potential%20attacks%20against%20your%20Web%20Applications.%26nbsp%3B%20This%20first%20tutorial%20in%20a%20four-part%20series%20walks%20you%20through%20creating%20a%20lab%20environment%20for%20testing%20against%20Azure%20WAF's%20protections.%26nbsp%3B%20This%20lab%20focuses%20on%20the%20OWASP%20protection%20ruleset%20and%20logging%20capabilities%20of%20Azure%20WAF.%26nbsp%3B%20The%20lab%20does%20not%20include%20advanced%20application%20security%20concepts%20and%20is%20not%20intended%20to%20be%20a%20reference%20for%20application%20security%20testing%20as%20these%20areas%20are%20broader%20than%20the%20use%20cases%20demonstrated%20herein.%26nbsp%3B%20For%20more%20information%20about%20each%20tutorial%20in%20this%20series%2C%20refer%20to%20the%20previous%20section%2C%20%3CA%20title%3D%22Tutorial%20Overview%22%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Ftutorial-overview-azure-web-application-firewall-security%2Fba-p%2F2030423%22%20target%3D%22_blank%22%3ETutorial%20Overview%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20this%20tutorial%20you%20will%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EDeploy%20a%20demo%20test%20environment%20in%20Azure%3C%2FLI%3E%0A%3CLI%3EDeploy%20Azure%20Monitor%20Workbook%20for%20WAF%3C%2FLI%3E%0A%3CLI%3EEnable%20desktop%20environment%20on%20Linux%20VM%3C%2FLI%3E%0A%3CLI%3ECreate%20host%20file%20entries%20to%20resolve%20host%20names%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-125454359%22%20id%3D%22toc-hId-125241118%22%3EPrerequisites%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EAn%20Azure%20subscription%20to%20deploy%20the%26nbsp%3B%3CA%20title%3D%22Azure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%22%20href%3D%22https%3A%2F%2Faka.ms%2FWAFattackLab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%3C%2FA%3E%3CBR%20%2F%3E%3CUL%3E%0A%3CLI%3EDo%20not%20have%20an%20Azure%20subscription%3F%20%3CA%20title%3D%22Create%20a%20free%20Azure%20account%22%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fen-gb%2Ffree%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECreate%20a%20free%20account%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3EA%20Log%20Analytics%20workspace%20to%20send%20all%20diagnostic%20logs%3CUL%3E%0A%3CLI%3EAzure%20Monitor%20Workbook%20for%20WAF%20deployed%20to%20the%20same%20workspace%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3EFamiliarity%20with%20Azure%20%3CSTRONG%3EApplication%20Gateway%20WAF%3C%2FSTRONG%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1682000104%22%20id%3D%22toc-hId--1682213345%22%3EDeployment%20Steps%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CA%20title%3D%22Deploy%20Azure%20WAF%20Attack%20Testing%20Lab%20Environment%22%20href%3D%22https%3A%2F%2FAka.ms%2Fwaflabdeploy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EClick%20here%3C%2FA%3E%20to%20deploy%20the%20lab%20environment%20to%20your%20Azure%20subscription%3C%2FLI%3E%0A%3CLI%3E%3CA%20title%3D%22Azure%20Monitor%20Workbook%20for%20WAF%22%20href%3D%22https%3A%2F%2FAka.ms%2FWAFworkbookdeploy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EClick%20here%3C%2FA%3E%20to%20deploy%20the%20Azure%20Monitor%20Workbook%20for%20WAF%20to%20your%20Azure%20subscription%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CUL%20class%3D%22lia-list-style-type-square%22%3E%0A%3CLI%3E%3CSTRONG%3E%3CFONT%20size%3D%222%22%3ETip%3A%3C%2FFONT%3E%20%26nbsp%3B%3C%2FSTRONG%3E%3CFONT%20size%3D%222%22%3EFor%20more%20information%2C%20refer%20to%20the%20detailed%20deployment%20instructions%20here%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fazure-network-security-proof-of-concept-part-2-deploying-the%2Fba-p%2F1773168%22%20target%3D%22_blank%22%3EDeploying%20Network%20security%20demo%20environment%3C%2FA%3E%3C%2FFONT%3E%3CUL%20class%3D%22lia-list-style-type-circle%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3EPlease%20refer%20to%20the%20above%20document%20for%20deployment%20instructions%20only%20and%20do%20not%20use%20the%20deployment%20template%20linked%20in%20it.%26nbsp%3B%20The%20deployment%20template%20used%20in%20these%20lab%20tutorials%20is%20different%20from%20the%20one%20used%20in%20the%20deployment%20instructions%20document%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-805512729%22%20id%3D%22toc-hId-805299488%22%3ERecommendations%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20recommend%20using%20the%26nbsp%3B%3CA%20title%3D%22Azure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%22%20href%3D%22https%3A%2F%2Faka.ms%2FWAFattackLab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%3C%2FA%3E%26nbsp%3Bas%20it%20already%20contains%20all%20the%20components%20needed%20for%20this%20lab%20including%20a%20customized%20version%20of%20the%20OWASP%20Juice%20Shop%20application.%26nbsp%3B%20The%20closer%20your%20lab%20is%20to%20the%20suggested%20lab%20setup%2C%20the%20easier%20it%20will%20be%20to%20follow%20the%20Azure%20WAF%20testing%20procedures.%26nbsp%3B%20After%20deployment%20and%20minimum%20configuration%20steps%2C%20you%20will%20be%20ready%20to%20perform%20actions%20with%20the%20suggested%20hacking%20research%20tools%20and%20review%20Azure%20WAF's%20protections%20against%20those%20malicious%20actions.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20data-unlink%3D%22true%22%3EWhen%20using%20the%26nbsp%3BAzure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%2C%26nbsp%3Badditional%20resources%20such%20as%20VMs%20and%20Azure%20Front%20Door%20will%20be%20deployed.%20%26nbsp%3BThe%20below%20diagram%20represents%20resources%20in%20the%20environment%20which%20are%20utilized%20in%20this%20lab.%26nbsp%3B%20The%20resources%20which%20are%20not%20used%20in%20this%20lab%20have%20been%20grayed%20out%20(VMs%2C%20Azure%20Front%20Door%2C%20DDoS%20Protection).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%222%22%3E%3CFONT%20color%3D%22%23FF0000%22%3E%3CSTRONG%3E!%3C%2FSTRONG%3E%3C%2FFONT%3E%3CSTRONG%3E%20IMPORTANT%3A%3C%2FSTRONG%3E%20%26nbsp%3BThis%20environment%20will%20be%20used%20as%20the%20baseline%20for%20the%20remainder%20of%20this%20document%20and%20the%20tutorial%3C%2FFONT%3E%3C%2FP%3E%0A%3CTABLE%20width%3D%22634%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22634%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mohit_Kumar_1-1609788007370.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F243940iE61E0E98CBEC68D5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Mohit_Kumar_1-1609788007370.png%22%20alt%3D%22Mohit_Kumar_1-1609788007370.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20this%20setup%2C%20traffic%20from%20the%20attacker%20machine%20(Kali%20VM)%20will%20be%20routed%20to%20the%20internet%20through%20the%20Azure%20Firewall.%26nbsp%3B%20Successful%20attack%20path%20is%20one%20where%20malicious%20data%20is%20sent%20directly%20by%20the%20attacker%20to%20the%20%3CSTRONG%3EOWASP%20Juice%20Shop%3C%2FSTRONG%3E%20web%20application%20leading%20to%20successful%20exploitation.%26nbsp%3B%20Attack%20path%20defended%20by%20WAF%20represents%20the%20path%20where%20malicious%20data%20is%20inspected%20by%20Azure%20WAF%20(on%20Azure%20Application%20Gateway)%20and%20blocked%20with%20its%20out%20of%20the%20box%20ruleset%20before%20it%20reaches%20the%20web%20application.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20use%20a%20preexisting%20environment%20for%20this%20lab.%20%26nbsp%3BFor%20completing%20these%20tutorials%2C%20your%20environment%20must%20have%20the%20following%20key%20components%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EAn%20instance%20of%20the%20customized%20OWASP%20Juice%20Shop%20web%20application%20with%20an%20internet%20accessible%20endpoint%3C%2FLI%3E%0A%3CLI%3EAn%20instance%20of%20Application%20Gateway%20with%20Azure%20WAF%20which%20publishes%20the%20OWASP%20Juice%20Shop%20web%20application%20to%20the%20internet%3C%2FLI%3E%0A%3CLI%3EAn%20attacker%20machine%20(VM)%20with%20common%20hacking%20tools%20and%20internet%20connectivity.%26nbsp%3B%20We%20use%20Kali%20Linux%20as%20the%20attacker%20VM%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20manually%20deploying%20the%20components%20required%20for%20this%20tutorial%2C%20your%20complete%20lab%20setup%20should%20look%20as%20similar%20as%20possible%20to%20the%20following%20diagram%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%20width%3D%22631%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22631%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mohit_Kumar_0-1609788486015.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F243942i59D85566B9E8994C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Mohit_Kumar_0-1609788486015.png%22%20alt%3D%22Mohit_Kumar_0-1609788486015.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1001941734%22%20id%3D%22toc-hId--1002154975%22%3EResources%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20below%20table%20details%20the%20resources%20needed%20from%20all%20resources%20deployed%20with%20the%20%3CA%20title%3D%22Azure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%22%20href%3D%22https%3A%2F%2FAka.ms%2FWAFattackLab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%20border%3D%221%22%20width%3D%2299.86187845303867%25%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2216.574585635359114%25%22%3E%3CP%3E%3CSTRONG%3EResource%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2225.276243093922652%25%22%3E%3CP%3E%3CSTRONG%3EName%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2211.464088397790055%25%22%3E%3CP%3E%3CSTRONG%3EIP%20Address%20Type%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2246.54696132596685%25%22%3E%3CP%3E%3CSTRONG%3EPurpose%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2216.574585635359114%25%22%3E%3CP%3EVirtual%20Machine%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2225.276243093922652%25%22%3E%3CP%3EVM-Kali%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2211.464088397790055%25%22%3E%3CP%3EPrivate%20only%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2246.54696132596685%25%22%3E%3CP%3EAttacker%20VM%20(%3CA%20href%3D%22https%3A%2F%2Fwww.kali.org%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EKali%20Linux%3C%2FA%3E)%20with%20preinstalled%20vulnerability%20and%20penetration%20testing%20tools%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2216.574585635359114%25%22%3E%3CP%3EFirewall%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2225.276243093922652%25%22%3E%3CP%3ESOC-NS-FW%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2211.464088397790055%25%22%3E%3CP%3EPrivate%20%26amp%3B%20Public%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2246.54696132596685%25%22%3E%3CP%3EAzure%20Firewall%20for%20outbound%20and%20inbound%20traffic%20restrictions%20and%20inspection%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2216.574585635359114%25%22%3E%3CP%3EAzure%20WAF%20on%20Application%20Gateway%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2225.276243093922652%25%22%3E%3CP%3ESOC-NS-AG-WAFv2%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2211.464088397790055%25%22%3E%3CP%3EPrivate%20%26amp%3B%20Public%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2246.54696132596685%25%22%3E%3CP%3EAzure%20Web%20Application%20Firewall%20preventing%20threats%20to%20the%20OWASP%20web%20application%20published%20through%20Application%20Gateway%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2216.574585635359114%25%22%3E%3CP%3EOWASP%20WebApp%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2225.276243093922652%25%22%3E%3CP%3Eowaspdirect-%3CDEPLOYMENT%20guid%3D%22%22%3E.azurewebsites.net%3C%2FDEPLOYMENT%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2211.464088397790055%25%22%3E%3CP%3EPublic%20only%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2246.54696132596685%25%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fowasp.org%2Fwww-project-juice-shop%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EOWASP%20Juice%20Shop%3C%2FA%3E%20Application.%26nbsp%3B%20An%20open%20source%20web%20application%20with%20built%20in%20security%20vulnerabilities%20and%20CFT%20challenges%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%3CFONT%20style%3D%22font-size%3A%20small%3B%20font-family%3A%20inherit%3B%22%20color%3D%22%23FF0000%22%3E%3CSTRONG%3E!%3C%2FSTRONG%3E%3C%2FFONT%3E%3CSTRONG%20style%3D%22font-size%3A%20small%3B%20font-family%3A%20inherit%3B%22%3E%20IMPORTANT%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%20small%3B%20font-family%3A%20inherit%3B%22%3E%3A%20%26nbsp%3BFor%20the%20scenarios%20demonstrated%20in%20this%20document%2C%20OWASP%20Juice%20Shop%20application%20was%20running%20on%20HTTP%20port%203000.%26nbsp%3B%20This%20is%20not%20the%20case%20when%20you%20use%20the%20Azure%20WAF%20Attack%20Testing%20Lab%20Environment%20Deployment%20Template%20as%20it%20configures%20the%20application%20to%20run%20on%20port%2080%2C%20443%20and%20assigns%20it%20a%20URL.%26nbsp%3B%20For%20the%20lab%20tutorials%2C%20you%20will%20connect%20to%20the%20application%20on%20HTTP%20port%2080%20only.%20%26nbsp%3BThe%20URL%20for%20the%20application%20will%20be%20http%3A%2F%2Fowaspdirect-%3CDEPLOYMENT%20guid%3D%22%22%3E.azurewebsites.net.%26nbsp%3B%26nbsp%3B%3C%2FDEPLOYMENT%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20class%3D%22lia-list-style-type-square%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3ETip%3C%2FSTRONG%3E%3A%20As%20it%20is%20a%20security%20best%20practice%2C%20we%20strongly%20recommend%20that%20you%20change%20the%20default%20lab%20password%20after%20deployment%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1485571099%22%20id%3D%22toc-hId-1485357858%22%3EConfiguration%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAdditional%20configuration%20is%20required%20on%20the%20Kali%20Linux%20VM%20before%20getting%20started%20on%20the%20lab%20exercises.%26nbsp%3B%20The%20Kali%20VM%20in%20this%20lab%20environment%20needs%20remote%20desktop%20environment%20installed%20and%20configured.%26nbsp%3B%20Please%20complete%20the%20steps%20in%20the%20order%20outlined%20below.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22toc-hId--2118834723%22%20id%3D%22toc-hId--2119047964%22%3E%3CFONT%20size%3D%223%22%3EUpdating%20Kali%20Linux%20and%20Installing%20Desktop%20Environment%3C%2FFONT%3E%3C%2FH3%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3ELaunch%20PowerShell%20on%20your%20local%20machine%20and%20run%20the%20following%20command%20to%20connect%20to%20the%20Kali%20VM%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%3CFONT%20size%3D%223%22%3E%3CSTRONG%3Essh%20svradmin%40%3CPUBLIC%20ip%3D%22%22%20address%3D%22%22%20of%3D%22%22%20azure%3D%22%22%20firewall%3D%22%22%3E%3C%2FPUBLIC%3E%3C%2FSTRONG%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%3CFONT%20size%3D%223%22%3E%3CSTRONG%3E%26lt%3B%3C%2FSTRONG%3E%3CEM%3EType%20your%20password%20when%20prompted%20to%20login%3C%2FEM%3E%3CSTRONG%3E%26gt%3B%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20class%3D%22lia-list-style-type-square%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3ETips%3A%20%3C%2FSTRONG%3E%3C%2FFONT%3E%3CUL%20class%3D%22lia-list-style-type-circle%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3EYou%20can%20find%20the%20public%20IP%20of%20Azure%20Firewall%20in%20the%20Azure%20Portal%20under%20%3CSTRONG%3EResource%20Group%20--%26gt%3B%20SOC-NS-FW%20--%26gt%3B%20Public%20IP%20configuration%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3EYou%20can%20also%20use%20%3CA%20href%3D%22https%3A%2F%2Fwww.putty.org%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EPutty%20client%3C%2FA%3E%20on%20your%20local%20machine%20to%20connect%20to%20the%20Kali%20VM%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%222%22%3E%0A%3CLI%3EOnce%20connected%20to%20the%20Kali%20VM%20with%20SSH%2C%20run%20the%20following%20command%20to%20update%20the%20Kali%20Linux%20distro%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%3CSTRONG%3Esudo%20apt-get%20update%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%3CSTRONG%3E%26lt%3B%3C%2FSTRONG%3E%3CEM%3EType%20your%20password%20when%20prompted%3C%2FEM%3E%3CSTRONG%3E%26gt%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3COL%20start%3D%223%22%3E%0A%3CLI%3EOnce%20the%20Kali%20Linux%20distro%20is%20updated%2C%20run%20the%20following%20command%20to%20install%20and%20configure%20the%20remote%20desktop%20server%20on%20the%20Kali%20VM%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Ea.%3CSTRONG%3E%20sudo%20apt-get%20-y%20install%20xrdp%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Eb.%3CSTRONG%3E%20sudo%3C%2FSTRONG%3E%20%3CSTRONG%3Esystemctl%20enable%20xrdp%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Ec.%3CSTRONG%3E%20echo%3C%2FSTRONG%3E%20%3CSTRONG%3Exfce4-session%20%26gt%3B~%2F.xsession%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Ed.%3CSTRONG%3E%20sudo%3C%2FSTRONG%3E%20%3CSTRONG%3Eservice%20xrdp%20restart%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CUL%20class%3D%22lia-list-style-type-square%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3ETip%3A%20%26nbsp%3B%3C%2FSTRONG%3EFor%20more%20information%2C%20refer%20to%20the%20step%20by%20step%20instructions%20to%20Install%20Desktop%20Environment%20on%20Linux%20VMs%20-%20%3CA%20title%3D%22Install%20and%20configure%20Remote%20Desktop%20to%20connect%20to%20a%20Linux%20VM%20in%20Azure%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-machines%2Flinux%2Fuse-remote-desktop%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EInstall%20and%20configure%20Remote%20Desktop%20to%20connect%20to%20a%20Linux%20VM%20in%20Azure%3C%2FA%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%224%22%3E%0A%3CLI%3EUpon%20completing%20the%20abovementioned%20steps%2C%20you%20should%20be%20able%20to%20connect%20to%20the%20Kali%20VM%20over%20RDP%20on%20port%2033892%26nbsp%3B%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Ea.%20Connect%20to%20the%20Kali%20VM%20over%20RDP%20by%20using%20the%20following%20IP%20address%20and%20port%20combination%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%3CSTRONG%3E%3CPUBLIC%20ip%3D%22%22%20address%3D%22%22%20of%3D%22%22%20azure%3D%22%22%20firewall%3D%22%22%3E%3A33892%3C%2FPUBLIC%3E%3C%2FSTRONG%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Eb.%20When%20prompted%20to%20choose%20the%20setup%20for%20the%20first%20startup%2C%20click%20to%20select%20%E2%80%9CUse%20default%20config%E2%80%9D%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mohit_Kumar_0-1609793055165.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F243952iC3F0CF46FCC97E01%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Mohit_Kumar_0-1609793055165.png%22%20alt%3D%22Mohit_Kumar_0-1609793055165.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%3CBR%20%2F%3Ec.%20You%20can%20now%20close%20your%20SSH%20session%20to%20the%20Kali%20VM%20by%20typing%20%E2%80%9Cexit%E2%80%9D%20in%20the%20SSH%20session%20running%20in%20PowerShell%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%225%22%3E%0A%3CLI%3ECreate%20an%20entry%20in%20the%20HOSTS%20file%20on%20Kali%20VM%20to%20map%20a%20name%20to%20the%20Public%20IP%20address%20of%20the%20OWASP%20Juice%20Shop%20site%20published%20on%20Application%20Gateway%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Ea.%20Launch%20Terminal%20and%20run%20the%20following%20command%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%3CSTRONG%3Esudo%20nano%20%2Fetc%2Fhosts%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%3CSTRONG%3E%26lt%3B%3C%2FSTRONG%3E%3CEM%3EType%20your%20password%20when%20prompted%3C%2FEM%3E%3CSTRONG%3E%26gt%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Eb.%20Create%20the%20following%20entry%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mohit_Kumar_0-1609794465822.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F243988iF9D86A3D4FF5AA80%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Mohit_Kumar_0-1609794465822.png%22%20alt%3D%22Mohit_Kumar_0-1609794465822.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3Ec.%20Save%20the%20hosts%20file%20and%20exit%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-60px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-90px%22%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EUse%20%3CSTRONG%3ECtrl%2BS%3C%2FSTRONG%3E%20to%20save%20and%20%3CSTRONG%3ECtrl%2BX%3C%2FSTRONG%3E%20to%20exit%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20class%3D%22lia-list-style-type-square%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3ETip%3A%20%26nbsp%3B%3C%2FSTRONG%3EYou%20can%20find%20public%20IP%20of%20the%20Application%20Gateway%20in%20the%20Azure%20Portal%20under%20%3CSTRONG%3EResource%20Group%20--%26gt%3B%20SOC-NS-AG-WAFv2%20--%26gt%3B%20Frontend%20Public%20IP%20address%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--2129337827%22%20id%3D%22toc-hId--2129551068%22%3ENext%20Steps%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBefore%20proceeding%20to%20the%20next%20tutorial%2C%20take%20a%20few%20mins%20to%20review%20the%20following%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EOWASP%20Juice%20Shop%20publishing%20rule%20on%20Application%20Gateway%3C%2FLI%3E%0A%3CLI%3EWeb%20Application%20Firewall%20configuration%20on%20Application%20Gateway%3C%2FLI%3E%0A%3CLI%3ETest%20connectivity%20to%20the%20OWASP%20Juice%20Shop%20website%20when%20accessing%20the%20application%20directly%20and%20when%20going%20to%20it%20through%20the%20Application%20Gateway%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20class%3D%22lia-list-style-type-square%22%3E%0A%3CLI%3E%3CFONT%20size%3D%222%22%3E%3CSTRONG%3ETip%3A%26nbsp%3B%20%3C%2FSTRONG%3EYou%20can%20find%20the%20public%20URL%20of%20the%20deployed%20Juice%20Shop%20app%20in%20the%20Azure%20Portal%20under%20%3CSTRONG%3EResource%20Group%20--%26gt%3B%26nbsp%3B%20owaspdirect-%3CGUID%3E%20--%26gt%3B%20URL%3C%2FGUID%3E%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%20border%3D%221%22%20width%3D%22100%25%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2250%25%22%20class%3D%22lia-align-left%22%3E%3CH4%20id%3D%22toc-hId-1059239584%22%20id%3D%22toc-hId-1059026343%22%3EPrevious%3A%20%3CA%20title%3D%22Tutorial%20Overview%22%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Ftutorial-overview-azure-web-application-firewall-security%2Fba-p%2F2030423%22%20target%3D%22_blank%22%3ETutorial%20Overview%3C%2FA%3E%3C%2FH4%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2250%25%22%20class%3D%22lia-align-left%22%3E%3CH4%20id%3D%22toc-hId-482655720%22%20id%3D%22toc-hId-482442479%22%3ENext%3A%26nbsp%3B%3CA%20title%3D%22Reconnaissance%20Playbook%22%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-network-security%2Fpart-2-reconnaissance-playbook-azure-waf-security-protection-and%2Fba-p%2F2030751%22%20target%3D%22_blank%22%3EReconnaissance%20Playbook%3C%2FA%3E%3C%2FH4%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CH4%20id%3D%22toc-hId--1324798743%22%20id%3D%22toc-hId--1325011984%22%3E%26nbsp%3B%3C%2FH4%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2030469%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20tutorial%20shows%20how%20to%20deploy%20and%20configure%20the%20lab%20environment%20to%20test%20and%20validate%20protection%20and%20detection%20capabilities%20of%26nbsp%3BAzure%20WAF.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Mohit_Kumar_0-1610675269623.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F246522iAA26CC5F4B3DE0CD%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Mohit_Kumar_0-1610675269623.png%22%20alt%3D%22Mohit_Kumar_0-1610675269623.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2030469%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Application%20Gateway%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20WAF%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Jan 15 2021 09:03 AM
Updated by: