Explanation:
Box 1: Azure WAF
Detects vulnerability scans of the apps
The Azure Web Application Firewall (WAF) on Azure Application Gateway actively safeguards your web applications against common exploits and vulnerabilities. As web applications become more frequent targets for malicious attacks, these attacks often exploit well-known vulnerabilities such as SQL injection and cross-site scripting.
WAF on Application Gateway is based on the Core Rule Set (CRS) from the Open Web Application Security Project (OWASP).
Features include:
* Protection against crawlers and scanners.
* Etc.
Box 2: Microsoft Defender for App Service
Detects whether newly deployed apps are vulnerable to attack
Protect your applications with Defender for App Service
Azure App Service is a fully managed platform for building and hosting your web apps and APIs.
It provides management, monitoring, and operational insights to meet enterprise-grade performance, security, and compliance requirements.
Microsoft Defender for App Service uses the scale of the cloud to identify attacks targeting applications running over App Service. Attackers probe web applications to find and exploit weaknesses. Before being routed to specific environments, requests to applications running in Azure go through several gateways, where they're inspected and logged. The data is then used to identify exploits and attackers, and to learn new patterns that are used later.
Reference:
https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview
https://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-enable-app-service-plan
https://learn.microsoft.com/en-us/azure/external-attack-surface-management/overview
https://learn.microsoft.com/en-us/defender-cloud-apps/protect-office-365