A WAF is a variant of the regular network firewall that is designed specifically to protect the web application layer. It adds HTTP protocol rules that are designed to filter web traffic and block common web attacks such as cross site scripting (XSS) and Sequel (SQL) Injection.
