To restrict a domain from public access in Azure

Question

Hi Team, I have application server which is mapped to application gateway with WAF 2. My application servers, have multiple services with different port. Like Port 443, 8080 and 8443. Especially HTTPS port - 443 pointed to two domains. For example: https://a.example.com and https://a1.example.com. Everything working fine. Now my client asking us to setup https://a1.example.com domain should be access in some IP ranges whereas https://a.example.com should be access to all. I know, if both domains are different then we can restrict from Network security group. But my case is both domains are listening on 443 Port. Can any please help me or advice on this? Is there any way to restrict one domain from APG or WAF or NSG or anywhere?

Answer 1

Hello @Lakshmi Narayanan ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

If you want block specific URL on Application gateway, you can use per-site WAF policies with custom rules feature in WAF V2 SKU to block the URL successfully.

Reference : https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/create-waf-policy-ag
https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/per-site-policies
https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/custom-waf-rules-overview
https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/create-custom-waf-rules

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.