You're paying for a WAF. Is it blocking anything?