Re: RE: Firewalls and PCI

[cstubbs () gmail com]

There's certainly cross over between the two, however I would have to say an application firewall should be more like a 
proxy with inspection/correction capabilities based on application knowledge. Less like a traffic interception and 
attack response device which is what an IPS is.

If it's a true application firewall it should also sit above transport security layers such as SSL/TLS in order to 
fully inspect everything that's about to be processed by the application.