WAF and how to calculate