Basically it's a set of application-specific proxies on your firewall. So rather than just making firewall decisions based on IP address or port etc, the firewall "understands" the application-layer protocol being used and knows what is normal behaviour during an HTTP or FTP or SMTP transaction and so will enforce the rules. This means it can detect and block some types of attack that a normal firewall would miss. Also, because it is a proxy, it sits between the sender and recipient, intercepting then passing on the requets and replies at an application level. This in itself adds security too. Many of the higher-end firewall products provide application proxy facilites you can turn on or off as required. The label "Application Inspection firewall" in essence just describes a firewall with those kind of facilities in it's arsenal
Hope that helps...
