WordPress firewall vs. host firewall: do you need both?
A WordPress firewall is a web application firewall (WAF) that understands WordPress requests and users. Your host’s firewall usually filters network traffic by port and IP, and doesn’t inspect what a request is trying to do inside WordPress. Most sites benefit from both: the host or a cloud WAF absorbs volume, and the WordPress firewall blocks application-level attacks with full knowledge of the site.