Discovery of Policy Anomalies in Distributed Firewalls