Brian Fonseca writes about application-level firewalls.
My prediction: there's absolutely no choice for firewall vendors to go in this direction. Web Services would represent a major target for attack. The richer services become, the more attack-prone they will be. The pain will only start with 'corporate' web services, but sprread on personal workstations as people employ more and more P2P tools.