application firewalls

rather than operating at the transport layer, they operate at that level, and up to the application layer. Can help perform input validation