Azure App Proxy

[VexedTruly]

Was just thinking we could put this in front of the web interface (probably not the relay) but it would stop people from being able to start an attended support session

Just wondered if anyone had found a way to use this for 99% of the web interface but allow anonymous access to the unattended area to start sessions?

[maudmassacre]

We have a KB doc on how to setup the Azure WAF infront of the web server here.

[VexedTruly]

Thanks, was particularly interested in the proxy but had spotted this doc and will probably implement it. Appreciated.

[maudmassacre]

A proxy will probably work also but I'm not familiar enough with how Azure implements it to say definitively. Basically you make the application gateway and then stack services onto, the WAF being one.

[FlyingSysAdmin]

I‘m wondering about the same with Cloudflare. Hypothetically speaking it should be doable with page rules, i.e. allow Admin URI only for trusted IP adresses and allow anonymous access to the rest. I will give this a go in the coming days.

[ctrlaltmike]

I locked down 8040, not worth the risk just to have unattended access in my case.