Glossary: Hardening, Firewalls and Intrusion Detection

WAF (web application firewall)

Also written: WAF, WAFs, web application firewall

A layer 7 firewall in front of a web server that reads every request and blocks attacks such as SQL injection, XSS and directory traversal. It usually terminates TLS, so it can read HTTPS requests.