Protect Your Applications with Azure WAF and Application Gateway
summary
Azure Application Gateway with Azure WAF is presented as a combined solution to protect web apps: Application Gateway provides multi‑site hosting, SSL offload, header rewrite and session affinity, while Azure WAF (using CRS 3.1) enforces detection or prevention policies, supports up to 100 custom rules and geo‑blocking. The talk demonstrates blocking traffic from Denmark and an automation runbook that bans an IP after more than 200 requests in 5 minutes, and notes practical limits (max body sizes), the need to tune rules, and using ARM templates for repeatable deployments.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker intro
- 4:14What is Azure WAF and Application Gateway
- 11:24Azure Application Gateway overview
- 25:28Web Application Firewall basics
- 33:26WAF policy configuration demo
- 41:57Custom rules and geo-blocking
- 53:39Monitoring WAF logs and alerts
- 59:05Key recommendations for WAF setup
- 1:02:36Security best practices and closing
related talks
33mNetwork and application protection on AWS
27mSecuring Applications and Managing WAFs at a large scale
29mWeb application protection on AWS
40mWAF Made Easy
15mBuilding a secure perimeter with AWS WAF
46mApplication Gateway Security What Developers Really Need to Know
18mEnhance application security at the edge with AWS
49mProtecting API workloads OWASP Top 10