Application layer security

In the previous section, we looked at firewalls. Although they are one of the very important components in the network security architecture, they lack the functionality of scanning the data section of the TCP header.

This is one of the reasons why IPS was used along with firewalls. IPS has the capability to analyze the payload of the TCP packets and can block suspicious attempts accordingly.