I'd like to take a moment not to report an issue, but to praise your work.
This weekend, one of our sites was being attacked by 300+ IP adresses and WAF has bravely fought them off as long as possible. Their attack was so "dumb" we can only assume taking down the site was their only goal.
WAF battled them bravely, blocking close to 200 IP addresses automatically (long live it's automatic banning feature!) until the site caved in. Unfortunately, the databases' session table got filled up and we exceeded the DB limit (Thanks, CB).
I'm certain that, otherwise, WAF would have battled them until they finally gave up.
Thank you for creating such a reliable ally who fights the evils of the internet when I am trying to enjoy my Sunday. :) And thank you for building a component that does things our hosting company can't or won't do - they are claiming "nothing eventful happened on that server".
WAF likes to disagree.
So, thank you for your great work. :)