“Understanding it, setting the right expectations, and how to continuously manage a WAF device.”

Transcript evidence from Tin Zaw -- ModSecurity and #AppSec.