Fortinet interview question

What is a WAF (web application firewall)?