Flexible grouping of IDP signatures for policies and profiles

IDP signature updates support four new tags for creating more sophisticated dynamic groups in addition to the existing seven tags. The signature database is one of the major components of intrusion detection and prevention (IDP). It contains definitions of different objects-such as attack objects, application signatures objects, and service objects-that are used in defining IDP policy rules. Attacks can be grouped by set of tags. 

The additional tags are: 

•  CVSS Score (for example: All signatures above 8.0) ?
• Age (for example: Older than years) 
• File Type (for example: MPEG, MP4, PPT, *.doc, and so on) ?
• Vulnerability Type (for example: buffer overflow, injection, use after free, XSS, RCE, and so on. The Product and Vendor tags are already supported under existing filter products. The CLI interface for configuring these tags is now been made more user friendly with possible completions being available for configuration. 
•  Vendor (for example: Microsoft, Apple, Red Hat, Google, Juniper, Cisco, Oracle, and so on.)  
•  Product (for example: Office, Database, Firefox, Chrome, Flash, DirectX, Java, Kerberos, and so on.)