Post

List all Application Gateway resources without WAF

Posted
By Otto Gudszent
1 min read

Application Gateway is a good solution to publish your web applications, but we should always use Web Application Firewall (WAF) to protect our applications. This Kusto Query Language (KQL) query helps you to find all Application Gateway resources without WAF.

1
2
3
4
5
6

Resources
| where type =~ "microsoft.network/applicationGateways"
| where isnull(properties.firewallPolicy) or isempty(properties.firewallPolicy.id)
| mv-expand frontEndIpConfig = properties.frontendIPConfigurations
| where isnotempty(frontEndIpConfig.properties.publicIPAddress.id)
| project name, resourceGroup, location, skuName = properties.sku.name, publicIpID = frontEndIpConfig.properties.publicIPAddress.id
Azure, Security
Azure Security Policy KQL
This post is licensed under CC BY 4.0 by the author.