Ensure that Web Application FireWall (WAF) is enabled for Application Gateways.
Azure Web Application Firewall (WAF) on Azure Application Gateway provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities.
Modify application gateway and enable WAF.