Web Application Firewall pricing

Cloud-native service that provides powerful protection for web application

Azure Web Application Firewall protects your web applications from bot attacks and common web vulnerabilities such as SQL injection and cross-site scripting. It can be deployed within minutes and you only pay for what you use.

Azure Web Application Firewall Service pricing

Application Gateways

We charge for the application gateways based on the amount of time that the gateway is provisioned and available, as well as the amount of data processed by the application gateways.

Application Gateway Type Basic Application Gateway Web Application Firewall Application Gateway
Small $- per gateway-hour (~$-/month) Not available
Medium $- per gateway-hour (~$-/month) $- per gateway-hour (~$-/month)
Large $- per gateway-hour (~$-/month) $- per gateway-hour (~$-/month)

* Monthly price estimates are based on 730 hours of usage per month.
** When using multiple instances, you are charged per instance.

For technical specifications and limitations regarding the different application gateways, please refer to this overview.

Data processing

Data processing charge is based on the amount of data processed by the application gateways.

Data Processing Small Medium Large
First 10 TB/month $- per GB $- per GB $- per GB
Next 30 TB
(10–40 TB)/month
$- per GB $- per GB $- per GB
Over 40 TB/month $- per GB $- per GB $- per GB

Inbound data transfers

(i.e. data going into Azure data centers)—Free

Outbound data transfers

(i.e., data going out of Azure data centers from application gateways)—Data transferred out of Azure data centers from the application gateways will be charged at standard data transfer rates.

Application Gateway Standard_v2 and WAF_v2 SKU

Azure Application Gateway Standard_v2 and WAF_v2 SKU offer additional support for autoscaling, zone redundancy, and Static VIP. These gateways also offer enhanced performance, better provisioning, and configuration update time, Header rewrites, and WAF custom rules. Please refer to documentation for additional product detail, as well as the FAQ section below for pricing and billing information

Application Gateway Web Application Firewall Application Gateway
Fixed $- per gateway-hour $- per gateway-hour
Capacity Unit1 $- per capacity unit-hour $- per capacity unit-hour
1 For more information on Capacity Unit, please refer to the FAQ section at the bottom of the page.
* Monthly price estimates are based on 730 hours of usage per month.

Web Application Firewall (WAF) with Azure Front Door and CDN Pricing1

WAF pricing includes monthly fixed charges and request based processing charges. There is a monthly charge for each policy and add-on charges for Custom Rules and Managed Rulesets as configured in the policy.

Policy Price Per Unit Pricing Unit
$5 Per month
Custom Rules Price per Unit Pricing Unit
Rules $1 Per month
Requests Processed $0.6 Per million requests
Managed Ruleset Price per Unit Pricing Unit
Default Ruleset $20 Per month
Requests Processed $1 Per million requests
1 WAF with Azure CDN from Microsoft is in public preview with 50% discount. Billing will begin on April 1, 2020.

Support & SLA

  • We provide technical support for all Azure services released to general availability including Application Gateway through Azure Support, starting at $29/month. Billing and subscription management support is provided at no cost.
  • Web Application Firewall availability guarantees are included in the SLA of the deployment option chosen, Application Gateway or Azure Front Door. Please see the Application Gateway SLA, and Azure Front Door SLA for more details.

FAQ

  • Yes, a partial hour is billed as a full hour for Application Gateway.
  • Yes, there is a minimum response size that you will be billed for. For any traffic sent through Front Door, you will be billed for a minimum response size of 2KB which maps to your outbound data transfers. If the response size for a given request is less than 2KB, you will still be billed for 2KB.
  • Capacity Units measure consumption-based cost that is charged in addition to the fixed cost. Capacity unit charge is also computed hourly or partial hourly. There are three dimensions to capacity unit - compute unit, persistent connections, and throughput. Compute unit is a measure of processor capacity consumed.

Resources

Review Azure pricing frequently asked questions

Learn more about Web Application Firewall

Review technical tutorials, videos, and more resources

Added to estimate. Press 'v' to view on calculator

Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.

Get free cloud services and a $200 credit to explore Azure for 30 days.