mod_security and ironbee questions

To: "users@xxxxxxxxxxxxxxxx" <users@xxxxxxxxxxxxxxxx>
Subject: mod_security and ironbee questions
From: "Rose, John B" <jbrose@xxxxxxx>
Date: Mon, 16 Mar 2015 18:06:12 +0000
Accept-language: en-US
Authentication-results: httpd.apache.org; dkim=none (message not signed) header.d=none;
Reply-to: users@xxxxxxxxxxxxxxxx
Thread-index: AQHQYBPjp2XmWbuCu0Ctj6NKESZdLA==
Thread-topic: mod_security and ironbee questions
User-agent: Microsoft-MacOutlook/14.4.8.150116

1. Can anyone suggest a good base set of rules to utilize within mod_security?

2. While looking around for info on mod_security we came across some mentions of ironbee. Can someone give a comparison of the two?

3. What would you recommend to use? mod_security? Ironbee? Something else? Mixture?

Thanks

Follow-Ups:
- Re: mod_security and ironbee questions
  - From: Nick Kew