1. A security appliance operatively coupled to a network, the security appliance comprising: a first memory; a second memory operatively coupled to the first memory; and at least one processor operatively coupled to the first memory and the second memory and configured to store a context for walking a given node, of a plurality of nodes of a given finite automaton of at least one finite automaton, the store including a determination, based on context state information associated with the first memory, for accessing (i) the first memory and not the second memory or (ii) the first memory and the second memory.