WAF Is Disabled For Azure Application Gateway

• Query id: 2fc5ab5a-c5eb-4ae4-b687-0f16fe77c255
• Query name: WAF Is Disabled For Azure Application Gateway
• Platform: Ansible
• Severity: Medium
• Category: Networking and Firewall
• CWE: 693
• URL: Github

Description

Check if Web Application Firewall is disabled or not configured for Azure's Application Gateway.
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - yaml file

- name: Create instance of Application Gateway
  azure_rm_appgateway:
    resource_group: myResourceGroup
    name: myAppGateway
    sku:
      name: standard_small
      tier: standard
      capacity: 2

Code samples without security vulnerabilities

Negative test num. 1 - yaml file

- name: Create instance of Application Gateway
  azure_rm_appgateway:
    resource_group: myResourceGroup
    name: myAppGateway
    sku:
      name: waf_medium
      tier: waf
      capacity: 2