title: Does Azure App Services come with a default WAF?
body: <p>I understand that one can develop an App Service Environment, and put a WAF within it to protect an AppService.</p>
  
  <p>What I'd like to know is:</p>
  
  <ul>
  <li>whether there is a default WAF provided by Microsoft -- even if rudimentary -- in front of App Services that are not within an ASE.</li>
  <li>if there wasn't one, or one wanted to put another one, can one actually put a WAF in front of a non-ASE AS (doesn't the AppService have a public IP that would always be available?)</li>
  </ul>
  
  <p>Thank you!</p>
  
  <p>PS: Any link to documentation that than can be referenced either way would be greatly appreciated.</p>