See documentation here: https://zuar.com/help/waf