yes, it's a good combination --- web server defend against http attack and firewall take care of the rest. lsws or lslb's built-in anti-ddos feature is accurate and efficient against http level attack. yes, no difference between lsws and lslb's anti-ddos feature.