Configuration review of a web application firewall (WAF)