To me, a WAF is something that the tech guys enable blindly and without any consultation, landing the devs in hot water when nothing works :)