The primary use case for using Web Application Firewall (WAF) in OCI is to filter malicious web traffic and protect internet-facing and internal applications from attacks. WAF is a cloud-based, PCI-compliant, global web application firewall service that monitors and controls access to web applications based on predefined rules and threat intelligence. WAF can block common web application attacks such as cross-site scripting (XSS), SQL injection, remote file inclusion, etc., as well as bot traffic, geographic restrictions, rate limiting, etc. WAF can protect any internet-facing endpoint or internal application by attaching WAF policies to enforcement points such as load balancers or web application domain names10