Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: SEP 26, 2023 | Ask-Me-Anything | Azure Firewall, Azure WAF and Azure DDoSHello @htakur03, Thanks for your question. To begin with, we would recommend that you use Application Gateway (SKU version 2) as Application Gateway (SKU version 1) will be retired - Deprecation Announcement - April 23, 2023 - https://learn.microsoft.com/en-us/azure/application-gateway/v1-retirement. For the Azure Firewall Premium, the intermediate certificate is used. You can view the certificate requirements from this page - https://learn.microsoft.com/en-us/azure/firewall/premium-certificates. For production deployments, you should use an Enterprise PKI to generate the certificates that you use with Azure Firewall Premium. This is outlined in this document - https://learn.microsoft.com/en-us/azure/firewall/premium-deploy-certificates-enterprise-ca. For the Application Gateway backend settings, you will use the root certificate of the Azure Firewall. You can check out this link for the end-to-end setup of Application Gateway with Firewall - https://learn.microsoft.com/en-us/azure/architecture/example-scenario/gateway/application-gateway-before-azure-firewall. You can also check out this blog on Zero Trust with Azure Network Security, which shows the steps when deploying Application Gateway with WAF, Azure Firewall and Azure DDoS - https://techcommunity.microsoft.com/t5/azure-network-security-blog/zero-trust-with-azure-network-security/ba-p/3668280
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagGeneral Availability of CAPTCHA in Azure Front Door WAF We are excited to announce the General Availability (GA) of the Azure Web Application Firewall (WAF) CAPTCHA challenge for Azure Front Door, empowering customers to better defend their web applicatio...Monitoring web application traffic for configuring rate limit on Azure Front Door WAF Introduction Azure Web Application Firewall (WAF) is a cloud-native service that actively protects web applications from common vulnerabilities and exploits. It also supports custom rules that allo...Azure WAF Tuning for Entra External ID Introduction This blog is the second part of a series on tuning Azure Web Application Firewall (WAF) for Entra External ID/Azure Active Directory (AD) and serves as a follow-up to the earlier blog ...Securing web applications with Azure Front Door WAF CAPTCHA Introduction Web applications today are constantly under siege from a range of threats, including automated bots and scrapers, as well as credential-focused threats such as credential stuffing and ...Public Preview of Azure WAF CAPTCHA Challenge for Azure Front Door Modern web applications face an ever-growing array of automated threats, including bots, web scrapers, and brute-force attacks. Many of these attacks evade traditional security measures such as IP bl...Mastering Regex with GitHub Copilot for Enhanced Azure WAF Security Written in collaboration with davidfrazee Introduction Azure Web Application Firewall (WAF) is a cloud native security service that provides protection for web applications from common exploits ...Azure WAF’s Bot Manager 1.1 and JavaScript Challenge: Navigating the Bot Threat Terrain Discover how Azure WAF’s Bot Manager 1.1 and the JavaScript Challenge elevate your bot protection strategy. In this blog, we explore how these advanced features in Azure Front Door and Appli...Independent Configuration of Size Enforcement and Inspection Limits in Application Gateway WAF Explore how the latest update to Azure's Application Gateway WAF enhances your security options by allowing independent configuration of size enforcement and inspection limits. This blog delve...Azure Firewall Protection Against Apache Struts Vulnerability - CVE-2023-50164 In this blog, we delve into the critical Apache Struts vulnerability CVE-2023-50164, demonstrating how Azure Firewall Premium can effectively block this high-severity threat. Learn about our d...Defending Against UDP Flood Attacks with Azure DDoS Protection Distributed Denial of Service (DDoS) attacks have become a frequent threat, wreaking havoc on businesses and their online services. These relentless assaults overwhelm network resources, rendering we...
MicrosoftMicrosoftMicrosoftMicrosoft
