The IDP device may select {HEAD ~ a policy} associated with the security class identified by {TAIL ~ the mapping} 
The IDP device may select { HEAD ~ a policy } associated with the security class identified by { TAIL ~ the mapping }
OTH OTH OTH OTH OTH HEAD HEAD HEAD HEAD HEAD HEAD OTH OTH OTH OTH OTH OTH OTH TAIL TAIL TAIL TAIL TAIL TAIL