Identifying web application firewalls