WAF policy to allow microsoft ips

Chethan Ravula 1 Reputation point
2020-10-23T17:00:19.77+00:00

Hi

I am using Forntdoot WAF and want to allow apps on other VNet on Azure to be able to talk through my frontdoor. Write now i have allow on certain ip and block if not the certain ips.
where can i get the ips used Microsoft so i can allow them all?

Thanks
Chethan

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
622 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. suvasara-MSFT 10,026 Reputation points
    2020-10-23T20:22:46.407+00:00

    @Chethan Ravula , you can implement IP restrictions by configuring IP ACLing for your backends to accept traffic from Azure Front Door’s backend IP address space and Azure’s infrastructure services only. Refer the IP details below for ACLing your backend:

    Refer AzureFrontDoor.Backend section in Azure IP Ranges and Service Tags for Front Door’s IPv4 backend IP address range or you can also use the service tag AzureFrontDoor.Backend in your network security groups or with Azure Firewall.

    Ref: https://video2.skills-academy.com/en-us/azure/frontdoor/front-door-faq#how-do-i-lock-down-the-access-to-my-backend-to-only-azure-front-door

    ----------

    Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

    0 comments
  2. Chethan Ravula 1 Reputation point
    2020-10-26T13:27:54.437+00:00

    Hi @suvasara-MSFT , i am not looking to restrict my apps to accept traffic from front-door. i am trying to allow my apps to talk to frontdoor and Frontdoor WAF policy is blocking them since my policy has IP acceptance rule that only allows specified ips.
    So i am looking for list of possible microsoft data center ips.

    To be more specific; I am looking to get the IP's that will be assigned to appservice on Azure based on region within US.
    Like CentralUS -- IP range that will be assigned to AppServices and VM's

    0 comments