Thanks for the reply halijenn.
Unless I missed something I don't see anywhere in those two links where a drop can be configured based on text in the trigger packet of the IPS alert. I know that drops can be configured for fields like source/destination IP/Port, and/or signature number, and such but I was wondering if the drop could be configured for the words that would show up in the trigger packet associated with the IPS alert.