Post

List all Application Gateway resources without WAF

Posted
By Otto Gudszent
1 min read

Application Gateway is a good solution to publish your web applications, but we should always use Web Application Firewall (WAF) to protect our applications. This Kusto Query Language (KQL) query helps you to find all Application Gateway resources without WAF.

1
2
3
4
5
6

Resources
| where type =~ "microsoft.network/applicationGateways"
| where isnull(properties.firewallPolicy) or isempty(properties.firewallPolicy.id)
| mv-expand frontEndIpConfig = properties.frontendIPConfigurations
| where isnotempty(frontEndIpConfig.properties.publicIPAddress.id)
| project name, resourceGroup, location, skuName = properties.sku.name, publicIpID = frontEndIpConfig.properties.publicIPAddress.id
Azure, Security
Azure Security Policy KQL
This post is licensed under CC BY 4.0 by the author.
The information on this site is provided as-is, without warranty of any kind. Use it at your own risk.