I use mod_security for personal sites and Cisco NetScaler as a WAF, load-balancer and SSL offloader at work. If I was given the choice, I would use HAProxy and mod_security as I'm not too impressed with NetScaler.