Web Application Firewall pricing
Cloud-native service that provides powerful protection for web application
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Azure Germany is available to customers and partners who have already purchased this, doing business in the European Union (EU), the European Free Trade Association (EFTA), and in the United Kingdom (UK). It provides data residency in Germany with additional levels of control and data protection. You can also sign up for a free Azure trial.
Azure Web Application Firewall Service pricing
We charge for the application gateways based on the amount of time that the gateway is provisioned and available, as well as the amount of data processed by the application gateways.
|Application Gateway Type||Basic Application Gateway||Web Application Firewall Application Gateway|
|Small||$- per gateway-hour (~$-/month)||Not available|
|Medium||$- per gateway-hour (~$-/month)||$- per gateway-hour (~$-/month)|
|Large||$- per gateway-hour (~$-/month)||$- per gateway-hour (~$-/month)|
For technical specifications and limitations regarding the different application gateways, please refer to this overview.
Data processing charge is based on the amount of data processed by the application gateways.
|First 10 TB/month||$- per GB||Free||Free|
Next 30 TB
|$- per GB||$- per GB||Free|
|Over 40 TB/month||$- per GB||$- per GB||$- per GB|
Inbound data transfers
(i.e. data going into Azure data centers)—Free
Outbound data transfers
(i.e., data going out of Azure data centers from application gateways)—Data transferred out of Azure data centers from the application gateways will be charged at standard data transfer rates.
Application Gateway Standard_v2 and WAF_v2 SKU
Azure Application Gateway Standard_v2 and WAF_v2 SKU offer additional support for autoscaling, zone redundancy, and Static VIP. These gateways also offer enhanced performance, better provisioning, and configuration update time, Header rewrites, and WAF custom rules. Please refer to documentation for additional product detail, as well as the FAQ section below for pricing and billing information
|Application Gateway||Web Application Firewall Application Gateway|
|Fixed||$- per gateway-hour||$- per gateway-hour|
|Capacity Unit1||$- per capacity unit-hour||$- per capacity unit-hour|
Web Application Firewall (WAF) Pricing1
WAF pricing includes monthly fixed charges and request based processing charges. There is a monthly charge for each policy and add-on charges for Custom Rules and Managed Rulesets as configured in the policy.
|Policy Price Per Unit||Pricing Unit|
|Custom Rules||Price per Unit||Pricing Unit|
|Requests Processed||$0.6||Per million requests|
|Managed Ruleset||Price per Unit||Pricing Unit|
|Default Ruleset||$20||Per month|
|Requests Processed||$1||Per million requests|
Support & SLA
- We provide technical support for all Azure services released to general availability including Application Gateway through Azure Support, starting at $29/month. Billing and subscription management support is provided at no cost.
- Web Application Firewall availability guarantees are included in the SLA of the deployment option chosen, Application Gateway or Azure Front Door. Please see the Application Gateway SLA, and Azure Front Door SLA for more details.
Yes, a partial hour is billed as a full hour for Application Gateway.
Yes, there is a minimum response size that you will be billed for. For any traffic sent through Front Door, you will be billed for a minimum response size of 2KB which maps to your outbound data transfers. If the response size for a given request is less than 2KB, you will still be billed for 2KB.
Capacity Units measure consumption-based cost that is charged in addition to the fixed cost. Capacity unit charge is also computed hourly or partial hourly. There are three dimensions to capacity unit - compute unit, persistent connections, and throughput. Compute unit is a measure of processor capacity consumed.
Estimate your monthly costs for Azure services
Review Azure pricing frequently asked questions
Learn more about Web Application Firewall
Review technical tutorials, videos, and more resources