Automatic analysis of firewall and network intrusion detection system configurations