SuperRanges, SubRanges and Best Match are critical components for allowing high level policy abstraction without sacrificing granular security