A primary function of a web application firewall is to monitor and filter HTTP traffic between a web application and the Internet. It helps to protect web applications from common attacks such as SQL injection and cross-site scripting (XSS). By enforcing security policies, it ensures that potentially harmful data is blocked, thus maintaining the integrity and confidentiality of sensitive information within the web application.