EIEIOTECHNOVATION
← Training programmes

EIEIO / CYBERSECURITY

Web Application Firewall

Course outline

3 days

Duration

3 days

Overview

Firewalls play a critical role in securing an environment, but not all firewalls are created equally. While traditional firewalls secure a perimeter, web-based applications require a content-aware solution beyond port and IP address blocking. Azure Web Application Firewall is a cloud-native service that protects web applications from new and well-known web-based attacks.

In this course, we review Azure Web Application Firewall. We examine different options for implementing the Web Application Firewall, including using it with Azure Application Gateway, Azure Front Door, and Azure Content Delivery Network. We create and apply rulesets, including Azure managed and user-managed custom rules. We also configure diagnostic logging options and review firewall logs from the Web Application Gateway.

Learning Objectives

  • Configuring detection or prevention mode
  • Implementing a WAF policy
  • Associating a WAF policy
  • Configuring rule sets for Azure Front Door, including Microsoft-managed and user-defined
  • Configuring rule sets for Application Gateway, including Microsoft-managed and user-defined

Intended Audience

  • System administrators with responsibilities for managing web applications
  • Security professionals responsible for securing Azure web applications
  • Anyone preparing for the Azure AZ-700: Designing and Implementing Microsoft Azure Networking Solutions exam

Prerequisites

  • A basic understanding of networking and security principles

Outline

COURSE INTRODUCTION

Introduction

WEB APPLICATION FIREWALL OVERVIEW

  • Introduction to Web Application Firewall
  • Web Application Firewall with Azure Application Gateway
  • Web Application Firewall with Azure Front Door
  • Web Application Firewall with Azure Content Delivery Network

CONFIGURING WEB APPLICATION FIREWALL

  • Implementing a WAF Policy for Application Gateway
  • DEMO: Implementing a WAF Policy for Application Gateway
  • Configuring Rule Sets for Application Gateway
  • DEMO: Configuring Rule Sets for Application Gateway
  • Configuring Rule Sets for Azure Front Door
  • DEMO: Configuring Rule Sets for Azure Front Door
  • Enabling Web Application Firewall Diagnostic Logs
  • DEMO: Enabling Web Application Firewall Diagnostic Logs

CONCLUSION

Programme scope, delivery arrangements and suitability are confirmed during enquiry.