- WAFs protect attacks at OSI model Layer 7
- Which is the application level
- This includes attacks against applications like Ajax, ActiveX, and JavaScript, as well as cookie manipulation, SQL injection, and URL attacks. They also target web application protocols HTTP and HTTPS, which are used to connect web browsers and web servers.
- Network firewalls operate at OSI model Layers 3 and 4
- Which protect data transfer and network traffic.
- This includes attacks against the Domain Name System (DNS) and File Transfer Protocol (FTP), as well as Simple Mail Transfer Protocol (SMTP), Secure Shell (SSH), and Telnet.