Editing Application firewall (section)

<!-- READ BEFORE EDITING!
before editing this page, please make sure the information being added explicitly relates to the unique qualities of application firewalls. Also, check to see if another article does not already exist that covers the content being added. Try to cite as much as possible as this information can be easily incorrectly explained, and the network security articles seem to follow a trend of not citing information.
-->
{{short description|Layer 7/application layer network security system}}
{{about|a sub-type of network firewall|the primary topic of firewalls|Firewall (computing)}}
{{More citations needed|date=February 2010}}

An '''application firewall''' is a form of [[Firewall (computing)|firewall]] that controls [[input/output]] or [[system call]]s of an application or service. It operates by monitoring and blocking communications based on a configured policy, generally with predefined rule sets to choose from. The two primary categories of application firewalls are ''network-based'' and ''host-based''.