add waf configuration - first step