Variables provide the CSA MC administrator a way of grouping items together to ease configuration. These variables, typically referred to as lists or sets, provide reusable objects that you can apply to many rules and alerts. You can group several objects together into variables. Once defined, you can edit these objects very easily at any point. Any rule or policy that makes use of the variable inherits the changes without you having to change every individual rule or policy directly.
Available variable types are as follows:
Network address sets
Network services sets
Dynamic file sets
COM component sets
The next sections explore each variable type, the sorts of objects they include, ...