WAFEC

I'm not asking to anger anyone, I'm asking an honest question: Is the Web Application Firewall Evaluation Criteria absolutely necessary? I mean, applicaton layer firewalls, Common Criteria and the like have been around for years. Where's the need?