Web Application Firewalls:

The second challenge was that when you publish a site with Azure AD Application Proxy, it is unable to access any resources higher in the URL path, such as CSS file for site presentation. This was especially problematic with applications that are part of webapps with multiple modules, such as TWebSchool (Web Attendance, Secondary Achievement). ................
................