Web Application Firewall pricing

A cloud-native web application firewall (WAF) service that provides powerful protection for web apps

Azure Web Application Firewall protects your web applications from bot attacks and common web vulnerabilities such as SQL injection and cross-site scripting. It can be deployed within minutes and you only pay for what you use.

Explore pricing options

Apply filters to customize pricing options to your needs.

Application Gateways

We charge for the application gateways based on the amount of time that the gateway is provisioned and available, as well as the amount of data processed by the application gateways.

Application Gateway Type Basic Application Gateway Web Application Firewall Application Gateway
Small $- per gateway-hour (~$-/month) Not available
Medium $- per gateway-hour (~$-/month) $- per gateway-hour (~$-/month)
Large $- per gateway-hour (~$-/month) $- per gateway-hour (~$-/month)

* Monthly price estimates are based on 730 hours of usage per month.
** When using multiple instances, you are charged per instance.

For technical specifications and limitations regarding the different application gateways, please refer to this overview.

Data processing

Data processing charge is based on the amount of data processed by the application gateways.

Data Processing Small Medium Large
First 10 TB/month $- per GB $- per GB $- per GB
Next 30 TB
(10–40 TB)/month
$- per GB $- per GB $- per GB
Over 40 TB/month $- per GB $- per GB $- per GB

Inbound data transfers

(i.e. data going into Azure data centers)—Free

Outbound data transfers

(i.e. data going out of Azure data centers from application gateways)—Data transferred out of Azure data centers from the application gateways will be charged at standard data transfer rates.

Application Gateway Standard_v2 and WAF_v2 SKU

Azure Application Gateway Standard_v2 and WAF_v2 SKU offer additional support for autoscaling, zone redundancy, and Static VIP. These gateways also offer enhanced performance, better provisioning, and configuration update time, Header rewrites, and WAF custom rules. Please refer to documentation for additional product detail, as well as the FAQ section below for pricing and billing information

Application Gateway Web Application Firewall Application Gateway
Fixed $- per gateway-hour $- per gateway-hour
Capacity Unit1 $- per capacity unit-hour $- per capacity unit-hour
1 For more information on Capacity Unit, please refer to the FAQ section at the bottom of the page.
* Monthly price estimates are based on 730 hours of usage per month.

Web Application Firewall (WAF) with Azure Front Door and CDN Pricing

WAF pricing includes monthly fixed charges and request based processing charges. There is a monthly charge for each policy and add-on charges for Custom Rules and Managed Rulesets as configured in the policy.

Monthly fixed charge

Price
Policy $5 Per month

Add-on charges

Custom Rules Price
Rules $1 Per month
Requests Processed $0.6 Per million requests
Managed Ruleset Price
Default Ruleset $20 Per month
Requests Processed $1 Per million requests

Azure pricing and purchasing options

Connect with us directly

Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimization, and request a custom proposal.

Talk to a sales specialist

See ways to purchase

Purchase Azure services through the Azure website, a Microsoft representative, or an Azure partner.

Explore your options

Additional resources

Web Application Firewall details

Learn more about Web Application Firewall features and capabilities.

Pricing calculator

Estimate your expected monthly costs for using any combination of Azure products.

SLA

Review the Service Level Agreement for this product.

Documentation

Review technical tutorials, videos, and more Web Application Firewall resources.

Frequently asked questions

  • Yes, a partial hour is billed as a full hour for Application Gateway.
  • Yes, there is a minimum response size that you will be billed for. For any traffic sent through Front Door, you will be billed for a minimum response size of 2KB which maps to your outbound data transfers. If the response size for a given request is less than 2KB, you will still be billed for 2KB.
  • Capacity Units measure consumption-based cost that is charged in addition to the fixed cost. Capacity unit charge is also computed hourly or partial hourly. There are three dimensions to capacity unit - compute unit, persistent connections, and throughput. Compute unit is a measure of processor capacity consumed.

Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.

Get free cloud services and a $200 credit to explore Azure for 30 days.