How does a firewall help to protect a server? @TildalWave There is always a confusion about role of application layer firewall and network layer firewall. My Question would by to detect XSS attack with an IP filter Firewall. Problem seems obvious attacker is not targeting network layer which is well protected. You cannot block port 80 traffic to protect your servers. I hope you get my point.