I'm doing a quick survey of web application firewalls that implement a reverse proxy and have a lot of heuristics about web server attacks and inspect the HTTP traffic specifically for those attacks. I've found a few major commercial offerings, but all of those are major $$$, typically north of $10K.
Are there any cheap commercial solutions for firewalling web servers that inspect the HTTP traffic for attacks?