There are many web applications in the University and many of which are considered as critical systems. In order to help reduce the risk of security breaches, data theft and corruptions, a Web Application Firewall is in place to add an extra protection layer against web targeted attacks, including commonly known types such as command injection, cross-site-scripting (XSS), SQL injection and many others.  The Web application firewall is able to inspect HTTP and HTTPS requests to the web application and filter them based on a number of rulesets defined in its policies.  Suspicious traffic would be blocked from reaching the servers thereby ensuring the uptime and operations of web applications.