App GW-WAF questions

%3CLINGO-SUB%20id%3D%22lingo-sub-3027328%22%20slang%3D%22en-US%22%3EApp%20GW-WAF%20questions%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3027328%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20recently%20got%20the%20following%20questions%20from%20my%20client%2C%20would%20you%20be%20able%20to%20assist%20with%20these%3F%20Thanks%20in%20advance!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EIs%20DNS%20SEC%20supported%20and%20from%20when%20%3F%20and%20if%20so%20does%20it%20work%20with%20the%20A%20record%20redirection%20possibility%3F%3C%2FLI%3E%0A%3CLI%3EDDOS%20Capcha%20to%20be%20able%20to%20confirm%20is%20this%20is%20%E2%80%9Cnormal%E2%80%9D%20traffic%20or%20an%20attack%20by%20pushing%20a%20capcha%20page%20from%20the%20WAF%20before%20it%20reaches%20the%20WebApp%3C%2FLI%3E%0A%3CLI%3EHow%20fast%20does%20the%20APPGW-WAF%20scale%2C%20their%20concerns%20come%20from%20some%20other%20features%20they%20use%20that%20do%20not%20scale%20fast%20enough.%3C%2FLI%3E%0A%3CLI%3EIs%20it%20possible%20to%20put%20in%20an%20ignore%20rule%20for%20the%20url%20protection%20feature%20to%20be%20able%20to%20overwrite%20the%20url%20protection%20if%20there%20is%20a%20false%20positive.%3C%2FLI%3E%0A%3CLI%3EIs%20there%20a%20way%20to%20get%20visibility%20to%20the%20whitelisted%20IP%20range%20in%20the%20DDOS%20module%20and%20when%20is%20it%20possible%20to%20create%20your%20own%20whitelist%3F%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Hi, I recently got the following questions from my client, would you be able to assist with these? Thanks in advance!

 

  • Is DNS SEC supported and from when ? and if so does it work with the A record redirection possibility?
  • DDOS Capcha to be able to confirm is this is “normal” traffic or an attack by pushing a capcha page from the WAF before it reaches the WebApp
  • How fast does the APPGW-WAF scale, their concerns come from some other features they use that do not scale fast enough.
  • Is it possible to put in an ignore rule for the url protection feature to be able to overwrite the url protection if there is a false positive.
  • Is there a way to get visibility to the whitelisted IP range in the DDOS module and when is it possible to create your own whitelist?

 

0 Replies
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE