MEDIUM
Source
CloudSploit
ID
application-gateway-waf-enabled

Application Gateway WAF Enabled

Ensure that Web Application FireWall (WAF) is enabled for Application Gateways.

Azure Web Application Firewall (WAF) on Azure Application Gateway provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities.

Modify application gateway and enable WAF.