[c-nsp] Web Application Firewalls (PCI 6.6)

[Burton Windle]

I'm looking for reviews and experiences with the various Web Application
Firewalls for compliance with PCI DSS 6.6. I've seen the marketing
presentations by Cisco for their ACE, and with Imperva and F5's ASM, but
am having trouble finding people who've actually used one.

Pretty small setup... pushing ~50mbit of egress traffic, with ~16k
concurrent connections.

Thanks in advance,

Burton