Question re Azure WAF

%3CLINGO-SUB%20id%3D%22lingo-sub-2278974%22%20slang%3D%22en-US%22%3EQuestion%20re%20Azure%20WAF%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2278974%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20the%20Azure%20WAF%20set%20up%20and%20are%20experiencing%20some%20issues%20with%20our%20SQL%20Developer%20connection%20dropping%20about%20every%203%20minutes.%26nbsp%3B%20%26nbsp%3BThis%20in%20turn%20is%20potentially%20causing%20a%20few%20of%20our%20more%20intensive%20reports%20that%20use%20SQL%20to%20fail.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20use%20Azure%20VM%20for%20our%20Oracle%20and%20Application%20Servers%20and%20these%20sit%20behind%20the%20Web%20Application%20Firewall.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOur%20ERP%20provider%20has%20requested%20that%20we%20try%20disabling%20the%20WAF%20temporarily%2C%20then%20trying%20running%20a%20couple%20of%20our%20intensive%20reports%20and%20queries%20to%20see%20whether%20this%20is%20a%20factor.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWithin%20Azure%20%26gt%3B%20Application%20Firewall%20I%20can%20see%20the%20%22Firewall%20Status%22%20switch%20which%20is%20currently%20set%20to%20Enabled.%26nbsp%3B%20My%20questions%20are%20as%20follows%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%26nbsp%3B%20%26nbsp%3Bis%20it%20purely%20as%20simple%20as%20changing%20this%20switch%20from%20enabled.%3C%2FP%3E%3CP%3E2.%26nbsp%3B%20what%20would%20happen%20to%20existing%20connections%20to%20our%20ERP%20software%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanking%20you%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2280510%22%20slang%3D%22en-US%22%3ERe%3A%20Question%20re%20Azure%20WAF%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2280510%22%20slang%3D%22en-US%22%3EHi%20Since%20you%20are%20using%20Azure%20VM%20you%20can%20leverage%20Service%20Map%20to%20be%20able%20to%20correctly%20see%20dependencies%20and%20troubleshoot%20by%20unit%20.%20Or%20use%20Azure%20Application%20Insights%20to%20have%20not%20only%20dependencies%20but%20also%20response%20times%20and%20more%20.%3CBR%20%2F%3EDisabling%20The%20Web%20Application%20Firewall%20will%20do%20nothing%20.%3CBR%20%2F%3EIt%20will%20just%20stop%20protecting%20your%20workloads%20from%20vulnerabilities%20and%20attacks%3CBR%20%2F%3EInstead%20of%20that%20i%20would%20suggest%20run%20it%20in%20detection%20mode%20so%20you%20can%20see%20what's%20happen%20even%20if%20you%20are%20not%20blocking%20the%20traffic%20.%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

We have the Azure WAF set up and are experiencing some issues with our SQL Developer connection dropping about every 3 minutes.   This in turn is potentially causing a few of our more intensive reports that use SQL to fail.

 

We use Azure VM for our Oracle and Application Servers and these sit behind the Web Application Firewall.

 

Our ERP provider has requested that we try disabling the WAF temporarily, then trying running a couple of our intensive reports and queries to see whether this is a factor.

 

Within Azure > Application Firewall I can see the "Firewall Status" switch which is currently set to Enabled.  My questions are as follows:

 

1.   is it purely as simple as changing this switch from enabled.

2.  what would happen to existing connections to our ERP software

 

Thanking you in advance.

1 Reply
Hi Since you are using Azure VM you can leverage Service Map to be able to correctly see dependencies and troubleshoot by unit . Or use Azure Application Insights to have not only dependencies but also response times and more .
Disabling The Web Application Firewall will do nothing .
It will just stop protecting your workloads from vulnerabilities and attacks
Instead of that i would suggest run it in detection mode so you can see what's happen even if you are not blocking the traffic .