We need this too, make comodo cwaf rules be able to block brute force attacks. I belive the main issue is the lack of request body filtering.
What we need the most is a real way to block all wordpress and joomla bruteforce attacks and the only way to do this seems bo require request body filtering.