Inference Service cannot be reached if used with an Application Gateway + WAF

[ant0nsc]

[peterhessey]

WIP comment: some rules may still need to be adjusted!

The Web Application Firewall contains rules that prevent requests from the InnerEye Gateway reaching the Inference App Service. These rules can be selectively deactivated to enable requests to pass uninhibited. To rectify this, follow these steps:

• Navigate to your WAF in your Application Gateway
• Select "Rules"
• Ensure "Advanced Rule Configuration" is enabled

• Under "REQUEST-920-PROTOCOL-ENFORCEMENT" deactivate the following rules:
  • 920300 (Request Missing an Accept Header)
  • 920310 (Request Has an Empty Accept Header)
  • 920311 (Request Has an Empty Accept Header)
  • 920320 (Missing User Agent Header)
  • 920340 (Request Containing Content, but Missing Content-Type header)
  • 920350 (Host header is a numeric IP address)

• Select save
• Wait ~30 minutes for the WAF to update. Your Gateway should now be able to interact with the Inference App Service.