Smart IT Solutions For Your Business

The Azure Web Application Firewall (WAF) on Azure Application Gateway actively safeguards your web applications against common exploits and vulnerabilities. As web applications become more frequent targets for malicious attacks, these attacks often exploit well-known vulnerabilities such as SQL injection and cross-site scripting.

Key Features

OWASP Core Rule Set

Based on the Core Rule Set (CRS) from the Open Web Application Security Project (OWASP) for comprehensive protection.

Multi-App Protection

Protect multiple web applications simultaneously with customized policies for each site behind the same WAF.

Bot Mitigation

Protect your web applications from malicious bots with the IP Reputation ruleset and specialized bot protection.

Comprehensive Protection

Common Attack Prevention

SQL injection protection
Cross-site scripting (XSS) protection
Command injection protection
HTTP request smuggling prevention
Remote file inclusion protection

Advanced Security

HTTP protocol violation protection
Bot mitigation with reputation ruleset
Geo-filtering by country/region
JSON and XML request body inspection
Custom rule creation for specific needs

Additional Capabilities

Configurable request size limits with lower and upper bounds

Exclusion lists to omit certain request attributes from evaluation

Detection of common application misconfigurations (Apache, IIS)

Protection against HTTP protocol anomalies

DDoS attack protection for your applications

No back-end code modifications required

Azure Web Application Firewall