Add WafPolicies

app/models/network_range.rb

@@ -73,6 +73,11 @@ class NetworkRange < ApplicationRecord
     addr.include?(':') ? 6 : 4
   end
 
+  def virtual?
+    # Virtual networks are unsaved instances (not persisted to database)
+    !persisted?
+  end
+
   def ipv4?
     family == 4
   end