Web Application Firewall is subscription-based software and protects web applications running on servers behind the SSL-VPN. Web Application Firewall also provides real-time protection for resources such as HTTP(S) bookmarks, Citrix bookmarks, offloaded web applications, and the SSL-VPN management interface and user portal.
Web Application Firewall provides real-time protection against a whole suite of web attacks such as cross-site scripting, SQL injection, OS command injection, and many more.
Web Application Firewall can also protect an offloaded web application, which is a special purpose portal created to provide seamless access to a web application running on a server behind the SSL-VPN appliance.