We are preparing our Azure network configurations. We have a NGF setup at the edge and several subnets behind the NGF including Production (servers), Control Center, and DMZ, and a few others. That said, we are considering the deployment of an Azure Barracuda WAF. Where is the recommended placement of the WAF? Should it be at the edge along side the NGF or in the DMZ?