{"id":14960,"date":"2020-08-04T07:21:35","date_gmt":"2020-08-04T07:21:35","guid":{"rendered":"https:\/\/www.testpreptraining.com\/tutorial\/?page_id=14960"},"modified":"2020-08-07T03:16:01","modified_gmt":"2020-08-07T03:16:01","slug":"create-an-application-gateway","status":"publish","type":"page","link":"https:\/\/www.testpreptraining.ai\/tutorial\/create-an-application-gateway\/","title":{"rendered":"Create an application gateway"},"content":{"rendered":"\n

This tutorial shows you how to use the Azure portal to create an Application Gateway with a Web Application Firewall (WAF). The WAF uses OWASP rules to protect your application. These rules include protection against attacks such as SQL injection, cross-site scripting attacks, and session hijacks. After creating the application gateway, you test it to make sure it’s working correctly. <\/p>\n\n\n\n

\"
Image Source – Microsoft<\/figcaption><\/figure><\/div>\n\n\n\n

Create an application gateway<\/strong><\/h3>\n\n\n\n

For Azure to communicate between resources, it needs a virtual network. You can either create a new virtual network or use an existing one. You can create a virtual network at the same time that you create the application gateway. Application Gateway instances are created in separate subnets. You create two subnets in this example: one for the application gateway, and another for the backend servers.<\/p>\n\n\n\n

Select Create a resource<\/strong> on the left menu of the Azure portal. The New<\/strong> window appears.<\/p>\n\n\n\n

Select Networking<\/strong> and then select Application Gateway<\/strong> in the Featured<\/strong> list.<\/p>\n\n\n\n

Add backend targets<\/strong><\/h3>\n\n\n\n

In this example, you’ll use virtual machines as the target backend. You can either use existing virtual machines or create new ones. You’ll create two virtual machines that Azure uses as backend servers for the application gateway.<\/p>\n\n\n\n

To do this, you’ll:<\/p>\n\n\n\n

  1. Create two new VMs, myVM<\/em> and myVM2<\/em>, to be used as backend servers.<\/li>
  2. Install IIS on the virtual machines to verify that the application gateway was created successfully.<\/li>
  3. Add the backend servers to the backend pool.<\/li><\/ol>\n\n\n\n

    Create a storage account and configure diagnostics<\/strong><\/h3>\n\n\n\n

    Create a storage account<\/strong><\/h4>\n\n\n\n

    For this article, the application gateway uses a storage account to store data for detection and prevention purposes. You could also use Azure Monitor logs or Event Hub to record data.<\/p>\n\n\n\n

    1. Select Create a resource<\/strong> on the upper left-hand corner of the Azure portal.<\/li>
    2. Select Storage<\/strong>, and then select Storage account<\/strong>.<\/li>
    3. For Resource group<\/em>, select myResourceGroupAG<\/strong> for the resource group.<\/li>
    4. Type myagstore1<\/em> for the name of the storage account.<\/li>
    5. Accept the default values for the other settings and then select Review + Create<\/strong>.<\/li>
    6. Review the settings, and then select Create<\/strong>.<\/li><\/ol>\n\n\n\n

      Configure diagnostics<\/strong><\/h4>\n\n\n\n

      Configure diagnostics to record data into the ApplicationGatewayAccessLog, ApplicationGatewayPerformanceLog, and ApplicationGatewayFirewallLog logs.<\/p>\n\n\n\n

      1. In the left-hand menu, select All resources<\/strong>, and then select myAppGateway<\/em>.<\/li>
      2. Under Monitoring, select Diagnostics settings<\/strong>.<\/li>
      3. select Add diagnostics setting<\/strong>.<\/li>
      4. Enter myDiagnosticsSettings<\/em> as the name for the diagnostics settings.<\/li>
      5. Select Archive to a storage account<\/strong>, and then select Configure<\/strong> to select the myagstore1<\/em> storage account that you previously created, and then select OK<\/strong>.<\/li>
      6. Subsequently, Select the application gateway logs to collect and keep.<\/li>
      7. Select Save<\/strong>.<\/li><\/ol>\n\n\n\n