What are some of the well-regarded commercial web application firewalls and reverse proxies? I'm evaluating Apache with the mod_security web firewall. I'd like to evaluate the better commercial offerings against this to see if paying a little more gives you more.