An XML firewall is an application layer firewall used to provide security for XML messaging such as Web services. XML firewalls are generally implemented in an organization’s DMZ that inspects incoming and outgoing messages for vulnerabilities before passeing them to the application or client.