Web Application Firewall (English: Web Application Firewall, abbreviation: WAF) is a specific form of application firewall used to filter, monitor and block HTTP/HTTPS traffic through web services. By monitoring HTTP/HTTPS traffic, It prevents attacks that exploit known vulnerabilities in web applications, such as SQL injection/cross-site scripting (XSS)/file inclusion and incorrect system configuration.

A web application firewall is a special type of application firewall, designed specifically for web applications. It is deployed in front of web applications and analyzes the two-way (usually HTTP/HTTPS) traffic of the network, enabling it to detect and block any Malicious content. This functionality may be implemented in software or hardware, executed in a special device, or in a typical server running a general operating system. It may be a stand-alone device or included in other network components. In other words, a WAF can be a virtual or physical device that prevents vulnerabilities in web applications from being exploited by outsiders. These vulnerabilities may be due to outdated programs or programming flaws. A WAF works by blocking compliance with a rule set, also known as (as filter conditions) traffic to solve these program flaws.

Previously unknown vulnerabilities could only be discovered through penetration testing or vulnerability scanners. A web application vulnerability scanner, also known as a web application security scanner, is defined in SAMATE NIST 500-269 as "a method of inspecting a network Automated programs that identify applications for potential security vulnerabilities. In addition to searching for vulnerabilities in specific web applications, these tools can also check for program errors. Web application vulnerability scanners can make corrections to the program within the application. It is also possible Custom strategies need to be applied to provide temporary emergency fixes (called virtual patches) for specific network application vulnerabilities.
WAFs are not a panacea for security solutions, but are designed to be used in conjunction with other network perimeter security solutions (such as network firewalls and intrusion prevention systems) to provide a holistic defense strategy.

Supported models
NGS 1315HE / 1351HF / 3542HTG / 3572HF / 5752HF / 5772HG / 5792HF / 5952HTG / 5972HG