1. A firewall apparatus comprising: a memory storing a plurality of firewall configurations defined by a plurality of different customers, each firewall configuration of the plurality of firewall configurations comprising (i) a production profile comprising a different first set of firewall rules or policies actively protecting customer content and services against real-world traffic and (ii) an audit profile comprising a different second set of firewall rules or policies testing new rules or policies against said real-world traffic without actively protecting the particular customer content or service with said new rules or policies; a network interface receiving an inbound message directed to a content or service of a particular customer of the plurality of customers; and a hardware processor (i) reconfiguring the apparatus firewall protections for the inbound message according to a particular firewall configuration from the plurality of firewall configurations defined by the particular customer and (ii) protecting the particular customer content or service from a first attack within the inbound message using the first set of firewall rules or policies from the production profile of the particular firewall configuration while simultaneously testing the second set of firewall rules or policies from the audit profile of the particular firewall configuration against the inbound message, wherein said testing comprises alerting the particular customer of a second attack in the inbound message violating a rule or policy from the second set of firewall rules or policy without protecting the particular customer content or service against the second attack.