Does anyone use CiviCRM behind a Web Application Firewall?
we have a slightly different approach for an enhanced security architecture using a proxy-server plus vpn. If you are interested, please sind more information plus code on GitHub, there was also a session on last year's CiviCon.

Let me know if you have any questions regarding CiviProxy.

Kind Regards
Fabian