You are right many firewalls operate on layer 4, but there are also Web Application Firewalls like ModSecurity which inspect HTTP messages on Layer 7.
You are right many firewalls operate on layer 4, but there are also Web Application Firewalls like ModSecurity which inspect HTTP messages on Layer 7.