The web application firewall is able to monitor the behavior and logic of what is requested and returned from web applications. It can not only protect against known types of attacks such as SQL injection, cross-site scripting, session hijacking, ...