A firewall filters traffic and blocks malicious requests. A WAF (Web Application Firewall) understands web attacks and can block, for example, attempts to inject malicious code. It runs in front of the website at the hosting provider or in a service such as a CDN.
This type of protection can also mistakenly block legitimate robots, such as monitoring tools. These then need to be allowed in the exceptions list.