DLP 11.6 Network Monitor IP Filtering

Hi All, 

I'm new to Symantec DLP solutions, but do have a question about IP filter in Network Monitor Configuration. 

I want to exclude packet with destination IP addresses 10.*.*.* and 11.*.*.*; 

Based on the syntex I learned from Symantec guide and this forum, I entered "-,10.x,x,x, *; -,11.x.x.x,*;+,*,*;". However, the system gave me validation errors. 

I'm wondering is the Symantec 11.6 Network Monitor having the new syntex to validate the IP filtering?

What can I do to make the syntex correct?

Thanks, 

Fiona