AZ525419 - Generally Available: Application Gateway for Containers with Web Application Firewall (WAF)

Azure Updates

Discussionpowered by zap.ms

Published

Nov 10, 2025

Status

Launched

Timeline

  • November 2025
    General Availability

Product

Application Gateway
Azure Kubernetes Service (AKS)
Web Application Firewall

Tag

Services
Security
Features

Category

Networking
Security
Compute
Containers

Description

Announcing Azure Web Application Firewall (WAF) support for Azure Application Gateway for Containers is now generally available. Application Gateway for Containers is the next evolution of Application Gateway + Application Gateway Ingress Controller. With the addition of Azure WAF support, Application Gateway for Containers workloads can now protect workloads from web-based attacks like SQL injections, cross-site scripting, protocol anomalies, and more.  

When using WAF to protect your Application Gateway for Containers resources you get access to the Azure-managed Default Rulesets (DRS), providing protection not only from threats identified by the Open Web Application Security Project (OWASP), but also additional protections provided by Microsoft’s Threat Intelligence Center (MSTIC). Application Gateway for Containers WAF users also have access to bot protection via bot manager rulesets and protection against DDoS attacks using rate limiting custom rules.  

Learn more.