@@ -95,7 +95,7 @@ $poolSetting01 = New-AzApplicationGatewayBackendHttpSettings -Name "setting1" -P
95
95
-Protocol Http -CookieBasedAffinity Disabled
96
96
97
97
$rule01 = New-AzApplicationGatewayRequestRoutingRule -Name "rule1" -RuleType basic `
98
- -BackendHttpSettings $poolSetting01 -HttpListener $listener01 -BackendAddressPool $pool
98
+ -BackendHttpSettings $poolSetting01 -HttpListener $listener01 -BackendAddressPool $pool -Priority 1000
99
99
100
100
$autoscaleConfig = New-AzApplicationGatewayAutoscaleConfiguration -MinCapacity 3
101
101
@@ -105,8 +105,6 @@ $sku = New-AzApplicationGatewaySku -Name WAF_v2 -Tier WAF_v2
105
105
### Create two custom rules and apply it to WAF policy
106
106
107
107
``` azurepowershell
108
- # Create WAF config
109
- $wafConfig = New-AzApplicationGatewayWebApplicationFirewallConfiguration -Enabled $true -FirewallMode "Prevention" -RuleSetType "OWASP" -RuleSetVersion "3.0"
110
108
# Create a User-Agent header custom rule
111
109
$variable = New-AzApplicationGatewayFirewallMatchVariable -VariableName RequestHeaders -Selector User-Agent
112
110
$condition = New-AzApplicationGatewayFirewallCondition -MatchVariable $variable -Operator Contains -MatchValue "evilbot" -Transform Lowercase -NegationCondition $False
@@ -118,7 +116,8 @@ $condition2 = New-AzApplicationGatewayFirewallCondition -MatchVariable $var2 -Op
118
116
$rule2 = New-AzApplicationGatewayFirewallCustomRule -Name allowUS -Priority 14 -RuleType MatchRule -MatchCondition $condition2 -Action Allow -State Enabled
119
117
120
118
# Create a firewall policy
121
- $wafPolicy = New-AzApplicationGatewayFirewallPolicy -Name wafpolicyNew -ResourceGroup $rgname -Location $location -CustomRule $rule,$rule2
119
+ $policySetting = New-AzApplicationGatewayFirewallPolicySetting -Mode Prevention -State Enabled
120
+ $wafPolicy = New-AzApplicationGatewayFirewallPolicy -Name wafpolicyNew -ResourceGroup $rgname -Location $location -PolicySetting $PolicySetting -CustomRule $rule,$rule2
122
121
```
123
122
124
123
### Create the Application Gateway
@@ -130,7 +129,6 @@ $appgw = New-AzApplicationGateway -Name $appgwName -ResourceGroupName $rgname `
130
129
-GatewayIpConfigurations $gipconfig -FrontendIpConfigurations $fipconfig01 `
131
130
-FrontendPorts $fp01 -HttpListeners $listener01 `
132
131
-RequestRoutingRules $rule01 -Sku $sku -AutoscaleConfiguration $autoscaleConfig `
133
- -WebApplicationFirewallConfig $wafConfig `
134
132
-FirewallPolicy $wafPolicy
135
133
```
136
134
0 commit comments