There are three types of WAF: 1. A network-based WAF is generally hardware-based 2. A software-based WAF is managed by a service provider that offers the WAF as a security-as-a-service. 3. Cloud-based WAFs offer an affordable and an easy to implement option