쥐스킨트의 작은 서재

Application firewall

An application firewall is a form offirewall that controls input, output, and/or access from, to, or by anapplication or service. It operates by monitoring and potentially blocking theinput, output, or system service calls that do not meet the configured policyof the firewall. The application firewall is typically built to control all networktraffic on any OSI layer up to theapplication layer. It is able to control applications or services specifically,unlike a stateful network firewall, which is without additional software –unable to control network traffic regarding a specific application. There aretwo primary categories of application firewalls, network-based application firewalls and host-based application firewalls.

Network-based application firewalls

A network-based application layer firewallis a computer networking firewall operating at the application layer of aprotocol stack, and is also known as a proxy-based or reverse-proxy firewall. Application firewalls specific to a particular kind of network traffic may betitled with the service name, such as a web application firewall. They may be implementedthrough software running on a host or stand-alone piece of network hardware. Often,it is a host using various forms of proxy servers to proxy traffic beforepassing it on to the client or server. Because it acts on the applicationlayer, it may inspect the contents of traffic, blocking specified content, suchas certain websites, viruses, or attempts to exploit known logical flaws inclient software.

From: https://en.wikipedia.org/wiki/Application_firewall