WAF does not block traffic based on IP address
Hi, I have a web app running on VMSS behind Application Gateway. Azure Firewall is front facing for that application gateway and domain name is also mapped with Azure Firewall public ip address. This domain name is configured as listener in…
Azure Application Gateway
Azure Web Application Firewall
Azure Application Gateway Zone Redundancy advisory with new deployments
Hi, We have an advisory in all our App Gateways which says that we should enable Zone Redundancy. As per the documentation, all newly deployed V2 SKUs should automatically be zone-redundant by default. We deleted an App Gateway and redeployed it with…
Azure Application Gateway
Azure Application Gateway works from Azure VM but not from on-premises network
Description I am experiencing a connectivity issue with Azure Application Gateway (v2) publishing an internal application. The application is accessible without issues when accessed from a virtual machine inside Azure, but fails when accessed from the…
Azure Application Gateway
Can Application Gateway for Containers(AGC) Be Placed Behind Azure Application Gateway?
Hi Folks, I’d like to check whether it is possible to place Application Gateway for Containers (AGC) behind an Azure Application Gateway (L7 load balancer), with traffic being redirected from the Application Gateway to AGC and then onward to AKS. I’d…
Azure Application Gateway
Application Gateway V2 - Backend TLS 1.3 support
It seems TLS 1.3 is not yet supported for backend connections in the Application Gateway (only TLS 1.2). The error when you are trying to connect to an unsupported TLS 1.3 backend is also very vague (in my opinion). Is there any indication when TLS 1.3…
Azure Application Gateway
IP Address on DNS server but no response from gateway or VM
We have an application gateway and IP address is registered with DNS but users get no response.
Azure Application Gateway
Application gateway failed state
Urgent case Dear team, I try to stop/start my application gateway (WAF v2 tier) by CLI Stop-AzApplicationGateway -ApplicationGateway $appgw Start-AzApplicationGateway -ApplicationGateway $appgw Stopping is successful. But I can't start. And now the…
Azure Application Gateway
How to troubleshoot if a cookie is being sent to application gateway with each and every request
I have a rule on WAF policy associated with application gateway with a rule (set as topmost rule) to allow traffic if a particular cookie is sent with the request. But we are seeing some requests that are not hitting that rule and instead hitting…
Azure Application Gateway
Rewrite rule conditions in Azure Application Gateway are not matching subpaths when using the RequestUri variable.
Description: I am configuring a rewrite rule in Azure Application Gateway that uses a condition on the RequestUri server variable. When I set the condition to match RequestUri == /v2/10, requests to /v2/10 are correctly detected. However, when I set…
Azure Application Gateway
Bicep deployment of Application Gateway fails with: (Code: InternalServerError)
Hello, I am trying to deploy an application gateway via Biceps - that uses both public and private frontend Ips and its purpose is to serve as a direct redirect for multiple public and private listeners. I have already tried deploying to different…
Azure Application Gateway
Does Azure Application Gateway support incoming webhooks?
Hi, I have set up an application gateway and listeners to recieve an incoming webhook, however getting 503 response when trying to test it from the external source. I know the listeners are set up correctly. Does Azure support incoming webhooks in…
Azure Application Gateway
Azure application gateway is not passing requests which contain x-forwarded-client-cert header
Hello, Here is the context to better understand the issue. I have a NVA deployed in Azure which does mTLS to authenticate the users. In addition this NVA needs to inject the x-forwarded-client-cert header into request so that backend server can use it to…
Azure Application Gateway
I am failing to deploy the VPN Gateway Globally showing error Persistent Global AnotherOperationInProgress Lock preventing the creation of a Virtual Network Gateway
While creating a Virtual Network Gateway always fails to deploy and facing an error ersistent Global AnotherOperationInProgress Lock preventing the creation of a Virtual Network Gateway. I change the reigon , resource group but every time it is failing…
Azure Application Gateway
Azure Application Gateway Backend Health
I have just created my first application gateway. There is an error for the backend health. The error reads "The Intermediate certificate is missing from the backend server chain. Please ensure that the certificate chain is complete and correctly…
Azure Application Gateway
Reusing Application Gateway Public IP on a VM – Is a New IP/DNS Still Allowed?
I need to migrate a public IP interface (IP address + DNS name) from an existing Application Gateway to a VM that will act as a TLS proxy. This is required because Application Gateway is dropping support for TLS 1.1, and some legacy devices in my…
Azure Application Gateway
Azure WAF - Replication of Request flagged by Microsoft Default Ruleset
Hi All, Seeking for guidance on how i can replicate the request sent into the AGW that is triggering the Microsoft_DefaultRuleSet. I have replicated using the same RequestURI and the Body but my request triggered from Postman does not trigger any of…
Azure Application Gateway
Azure Application Gateway for Containers - Availability in Sweden Central
Hi, I would like to know if Microsoft can share more information about the region support roadmap. What is the status for getting support for Application Gateway for Containers in region: Sweden Central. -Tommi
Azure Application Gateway
Azure Application Gateway - 308 Permanent redirection support
Im aware that Azure Front Door can do this but.......is response code 308 (Permanent Redirect) on the Roadmap for Application Gateways? as per RFC7538 or is there some undocumented way of setting this up currently in App GWs?
Azure Application Gateway
IP Groups association with WAF
I want to block dynamic bulk malicious IPs in all Application Gateways which is associated with WAF. I need solution like using IP Group, so that I call this IP Group in one custom rule to match IPs which is being added/removed.
Azure Application Gateway
Add Application Gateway to the current setup & NSG
I have one Azure subscription with two resource groups (A and B). Each resource group contains two servers: App Server – hosts an application (currently map with DNS Public IP). DB Server – backend database server (no direct Internet access). The App…