Absolutely bang on. The real world value of the WAFs and NGFWs is questionable and a well run technology stack simply does not need them. This article highlights why we have firewalls/WAFs but no one is actually using. Its just a tick on the auditors checklist.
And the WAF continues to hang around, an outdated technology propped up by legalese rather than actual utility, providing a false sense of security without doing much to ensure it. If that isn’t enough for you to show your WAF the door, here are three more reasons why WAFs should be replaced.
Three Ways WAFs Fail : https://labs.signalsciences.com/three-ways-wafs-fail