fA medium size paper supply firm's web application allows customers to schedule appointments with their paper sales associate. Unfortunately, the application runs on outdated software and represents a security risk containing a remote code execution vulnerability.fA medium size paper supply firm's web application allows customers to schedule appointments with their paper sales associate. Unfortunately, the application runs on outdated software and represents a security risk containing a remote code execution vulnerability.

However, because the software is needed for the company to function, they decide to implement an application$-$layer firewall to control incoming requests to the application.