The Firewall module is handled automatically by the App module. If you want to disable it, set the settings.firewall.enabled to false.
An IP will be blacklisted for 30 seconds if it gets flagged by the firewall. If it keeps trying to make suspicious requests, it will get blacklisted for 1 hour. All these specific values are defined under the settings.firewall key.
For detailed info on specific features, check the annotated source on /docs folder.