{HEAD ~ The IDP device} may select a policy associated with {TAIL ~ the security class} identified by the mapping 
{ HEAD ~ The IDP device } may select a policy associated with { TAIL ~ the security class } identified by the mapping
HEAD HEAD HEAD HEAD HEAD HEAD HEAD OTH OTH OTH OTH OTH OTH TAIL TAIL TAIL TAIL TAIL TAIL TAIL OTH OTH OTH OTH