Azure Firewall Manager
An Azure service that provides central network security policy and route management for globally distributed, software-defined perimeters.
88 questions
WAF Custom Rule not working
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 57.00000000000001%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAP%3C/text%3E%3C/svg%3E)
Arun P
1
Reputation point
I am trying to block an end point from my WAF using a custom rule. My waf is in preventive mode and I tried creating the custom rule both manually through portal and also using powershell script. Seems it is not blocking the end point. Could you please provide some guidance on the same ? Please see the
attachment for more details.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee2022-09-08T02:58:51.2+00:00 Hello @Arun P , Welcome to the Microsoft Q&A forum.
In such scenarios we have usually observed that the WAF policy is not assigned to the correct listener. Can you please validate if the WAF policy is linked to the correct listener of your Application Gateway? If this is not the case, can you please explain your workflow in more detail? like which URL you are trying to deny and if there are any redirects etc set-up. Thank you!
-
Arun P 1 Reputation point
2022-09-12T06:23:52.507+00:00 Hi @ChaitanyaNaykodi-MSFT I have associated a path (route path) in the waf policy. I am trying to block an endpoint from public access. URL will be like https://xxxxx.com/v7_11/auth/basicoauth2
-
ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee
2022-09-13T23:47:50.853+00:00 Hello @Arun P , Thank you for sharing additional details. I do not see any issues in the custom rule applied above. I think creating a support ticket with us will be better option in this case. If you do not have a support plan, can you please refer to my private message below. Thank you!
Sign in to comment