Web App Firewalls: How to Evaluate, Buy, Implement

* Power and ease-of-learn mode;

* Types of vulnerabilities it can prevent;

* Ability to keep individual users constrained to exactly what they have seen in the current session;

* Ability to be configured to prevent specific problems, such as emergency patches;

* Form factor: software versus hardware (hardware generally preferred).