Webserver Protection WAF

Question

Hello, 
 
 I have a VPN Router in a DMZ, what is routing all my Internet Traffic to a VPN Service. I was wondering to protect the Router in the DMZ, if it would make sense activate Web Application Firewall for this Router ? 
 
 I know that this settings normally are for protecting virtual / real web servers, but can they also be used for protecting my DMZ Router ? 
 
 Thx

DouglasFoster · Answer

If your router has a web interface, is behind UTM, and will allow connections from the internet, then Webfilter is a good idea. If the router can be reached from the internet without going through UTM, then WAF is of no value. The best result is to configure the router so that it only accepts traffic from your own IP addresses.