Add more info about safety

Author: e-n-0

content/en/security/application_security/setup/standalone/gcp-service-extensions.md

@@ -79,7 +79,15 @@ To set up the App and API Protection Service Extension in your GCP environment,
     1. To send all traffic to the extension, insert `true` in the **Match condition**.
     2. For **Programability type**, select `Callouts`.
     3. Select the backend service you created in the previous step.
-    4. Select all **Events** from the list where you want App and API Protection to run detection (Request Headers and Response Headers are **required**).
+    4. Select only **Events** from the list where you want App and API Protection to run detection (Request Headers and Response Headers are **required**).
+
+    <div class="alert alert-info">
+      <strong>Note:</strong> If you select request and response bodies events, processing time will increase as the service extension needs to transfer and analyze these bodies. Adjust your timeout settings accordingly to accommodate the additional processing time.
+    </div>
+
+    <div class="alert alert-info">
+      <strong>Note:</strong> By default, if the service extension fails or times out, the proxy will return a 500 error. To prevent this, enable the <code>fail_open</code> setting. When enabled, request or response processing continues without error even if the extension fails, ensuring your application remains available.
+    </div>
 
 </br>