Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System?