Implementing a Web Application Firewall (WAF) in Azure

Web and API applications are popular workload types to host in Azure virtual networks. They are also increasingly targeted by malicious attacks that exploit commonly known vulnerabilities, such as SQL injection and cross-site scripting.

Apart from getting developers to follow good coding security practices when developing web applications, a WAF can also be deployed at the network perimeter as an added layer of protection against these exploits and vulnerabilities. WAF can be deployed with three services in Azure:

• The Azure Application Gateway WAF SKU: This is a regional-level WAF that can be deployed in Azure virtual networks to protect public-facing or private workloads.
• Azure Front Door WAF: This is a WAF service that is integrated with the Azure Front Door global service.
• Azure Content Delivery Network (CDN): Similar to the WAF on Azure Front Door, this is a global service that is integrated with the Azure...