App firewall helps counter DDoS threats