Application layer firewalls operate at layer 7 and can perform network address translation as part of their traffic inspection and routing functions. While NAT is more commonly associated with layer 3 devices, ALFs can translate IP addresses and ports as they manage application-level connections and sessions.