← Security+ glossary

Web application firewall (WAF) WAF

A specialized firewall that protects web applications by analyzing HTTP/HTTPS traffic and stopping attacks such as SQL injection and cross-site scripting. An ordinary network firewall does not understand the content of web requests, so a WAF is needed for protection at the application layer.

All Security+ guides →