Hi,
i have tested the WAF last few days and i think we would need a exception function like http proxy has. for example:
the systems detects a sql event when the word "select" is used in a url.
it would be best to have a option to exclude some words form the filters or have a possibility to customize them