Firewalls can operate at Layer 7, too. The “F” in “WAF” stands for “firewall.”