liveBook · Manning

Azure Application Gateway

As explained in Azure Security

Azure Application Gateway v2 is the second-generation deployment version of Azure Application Gateway that supports WAF policies.

Azure Application Gateway v2 is a regional, layer-7 load-balancing service for web applications hosted on virtual machines or containers. Its WAF capabilities are managed through a separate WAF policy, replacing legacy inline WAF configuration. section 3.3.1

Configure a protected gateway by:

  • Add Microsoft-managed bot protection to block or log requests associated with known malicious bot IP addresses. section 3.3.1

How Azure Security covers it

How deep it goes
Descends through Azure CLI creation, policy association, managed rules, bot protection, and Prevention-mode enablement.
Examples
Uses Azure CLI commands to create an OWASP WAF policy, add bot protection, deploy WAF_v2, and enable Prevention mode.
What it assumes
Assumes Azure networking resources and permissions commonly provided by the Network Contributor role.
What you can do after
Operate/configure a WAF_v2 gateway with an associated policy, managed OWASP rules, bot protection, and blocking behavior.
How it connects
Connects layer-7 load balancing with web application firewalls, OWASP rule sets, bot protection, virtual networks, and Azure CLI.

Also explained in

Compare how 2 books explain Azure Application Gateway →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.