I recently put together a tips and advice article for Virtual Patching for SANS (cache). You can read it here Virtual Patching for Web Applications with ModSecurity (cache). Technical Review of the article was by Ryan Barnett and GIAC Advisory Board, which I greatly appreciate.