WEB APPLICATION FIREWALL

SLASCONE is secured by the Azure Web Application Firewall, which is a cloud-native service that protects web apps from common web-hacking techniques such as SQL injection and security vulnerabilities such as cross-site scripting.

SaaS

if you are using our SaaS solution (my.slascone.com), then you already profit from the WAF. No further actions are necessary.

PRIVATE AZURE DEPLOYMENT

If you deployed SLASCONE in your own Azure subscription as described here, then you have to explicitly deal with this issue, since Azure's WAF is not a part of SLASCONE's initial installation. The reason that this step is not included is because:

• you may already have Azure WAF (or any other WAF technology, e.g., Cloudflare) in place. In such a case, you just need to configure SLASCONE's routing accordingly.
• the SLASCONE API is not public, in which case a WAF is not necessary. The API should not be public if it is only consumed from within Azure or through a dedicated IP range.

If none of these applies, our team can install Azure WAF in combination with Azure Front Door or Application Gateway.