An Azure service that provides protection for web apps.
Geo location rule not working as expected
I HAVE GEO LOACTION BLOCK RULE IN WAF TO BLOCK NON-US traffic ,but it is blocking US ip address also
Azure Web Application Firewall
Azure WAF JSChallenge- SameSite=Strict cookie breaks replay POST mechanism
The Application Gateway WAF JSChallenge feature sets the appgw_azwaf_jsclearance cookie with SameSite=Strict, which prevents the cookie from being sent on the replay POST after challenge completion. This causes users to see a 403 error after successfully…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Need JA4 enabled on our Front Door WAF
How do we Enable JA4 / ClientFingerprint feature flag? I turned on Developer support but that only pushed me to post here/.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Enable JA4 / ClientFingerprint feature flag
I need to submit a ticket to enable the JA4 fingerprint feature on my Front Door WAFs
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WebApplicationFirewallPolicy validation failed. Subscriptions without DeveloperPreview flag enabled cannot use Microsoft_DefaultRuleSet_2.2
Attempting to create or update WAF premium policy with DRS 2.2 and I get the error in title. I cannot find what feature to register either in the portal or in powershell/CLI - Nothing references DefaultRuleSet.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Rest API reference document for application gateway WAF was missing
My customer need to update/create their WAF rule using REST API. Previously there is the reference document…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
How to enable JA4 feature for Azure FrontDoor WAF?
Bicep template mentioned JA4 matchVariable is available. https://learn.microsoft.com/en-us/azure/templates/microsoft.network/frontdoorwebapplicationfirewallpolicies?pivots=deployment-language-bicep#matchcondition However, it returns "Operator…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF Rule Exclusion Not Working for FIX Rule Group Rule 943110 in Microsoft_DefaultRuleSet_2.1
Hi Community, I have configured a rule exclusion on our Azure Front Door WAF policy but the rule continues to fire despite the exclusion being in place for several hours. Looking for help understanding if this is a known limitation or a bug. Setup: …
Azure Web Application Firewall
An Azure service that provides protection for web apps.
google web bots deny by microsoft waf
We are getting reports that google web crawlers are getting blocked by azure waf. I am not seeing anything blocked in the logs although google is claiming it is being blocked. The web crawler testing yeilds that google crawler is allowed although from…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Intermittent IPv6 Connection Hangs/Timeouts to Azure Front Door Endpoints (t-msedge.net) on Windows 11 and Linux
I am experiencing consistent connectivity issues when accessing websites hosted on the Microsoft Azure edge network (specifically endpoints like part-0016.t-0009.t-msedge.net) over IPv6. The connection hangs indefinitely during data transfer, while IPv4…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
How to restrict /admin path access to VPN users while keeping the rest of the application publicly accessible?
I have an application hosted behind an Azure Application Gateway with WAF enabled and accessible through a public domain. The requirement is: The main application (e.g., https://example.com) should be accessible to everyone on the internet. The…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
WAF custom rule for rate limiting only blocking every other request once limit is reached.
This is the rule that is being applied: This is an example of the output: Notice that the status codes alternate between 401 and 429. The rule is kicking in but does not persist. There are other articles that indicate others are observing this…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Allow ICMP over Azure APPGW - Firwall
Hello colleagues, We are using an Internet breakout solution which looks like below: Internet > AzureFw > Azure APPGW > LB > IPS > Azure vnet that contains Backends on which WebApps are being hosted, one of this applications for…
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Multipart request body failed strict validation and Failed to parse request body while trying to upload files using multi-formdata
Trying to upload a file using the below code var multipartContent = new MultipartFormDataContent { { new StringContent("hrishi"), "createdBy" }, { new StringContent("hrishi"),…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Issue with IP Whitelisting Configuration in Azure Front Door
We are using a web application with Azure Front Door service and are trying to implement IP whitelisting. Unfortunately, the setup is not functioning as expected. We need assistance in troubleshooting and fixing this issue. Please provide support as soon…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure WAF AllowFrontDoor stuck at "pending"
Hello Azure Support, I hope all is well. We are unable to create an Azure Front Door WAF policy in our subscription. The subscription feature Microsoft.Network/AllowFrontdoor remains in Pending for >36 hours, and WAF policy creation fails with a…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Is it possible to allow multiple cookies in a custom rule in Frontdoor WAF?
Hi. Like the title says. We have now a bunch of cookies that we need to allow through the WAF. We have solved this with exclusions for now, but I would like to move them to custom rule(s) to try and clean up the exclusion a bit. Is it possible to…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure Front Door WAF custom rules inconsistently applied - IP whitelist bypassed intermittently despite correct configuration
Problem Summary: We have configured custom IP whitelist rules in our Azure Front Door WAF policy, but they are being applied inconsistently. Access to our domain works intermittently from the same whitelisted IP address - sometimes returning HTTP 200…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
SSL Import Error on Application Gateway LB
Hello, I wanted to add SSL to the Application Gateway I created. I exported the SSL certificate using a p7b file and uploaded the root certificate, intermediate certificate, and regular certificate. However, I received an error. The error image is below.…
Azure Web Application Firewall
An Azure service that provides protection for web apps.
Azure WAF false positive problems
Hi. Why does Azure WAF DRS 2.1 still have frequent false positives, and why hasn’t this been improved? thanks
Azure Web Application Firewall
An Azure service that provides protection for web apps.