I'm designing a greenfield azure platform and looking for the best way to implement the network security using Application Gateways and NGWFs.

What is the correct approach here, Would you deploy 2 NGFW loadbalanced by a ApplicationGateways for WAF and Layer 7, and then the firewall would route on to the internal loadblancer for a webApplication or any other service.

Is there any gotchas with this method, in the traditiona approach i always had the firewalls on the perimeter and routed to F5 loadbalancer, but looking at the documentation now it suggests more that the ApplicationGateway waf would be the first point?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.