Neglected assets

Azure Application Gateway frontend configuration without routing rules

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications, offering various Layer 7 load-balancing capabilities. The frontend configuration which associated with a frontend IP address of the Application Gateway is the point of contact for clients. The Azure Application Gateway - {AzureApplicationGateway} has a frontend configuration - {AzureApplicationGateway.FrontEndConfigurations.Name} without any routing rules associated to it. Azure Application Gateway without associated routing rules from the frontend configuration leaves the frontend configuration not used and does not comply with security best practices.
  • Recommended Mitigation

    It is recommended to review the Application Gateway's frontend configuration and if not needed remove any unused resources in order to reduce costs or configure routing rules including the relevant Application Gateway's frontend configuration.