Cisco OL-4015-08 User Manual page 646

Glossary
CA certificate
cache
CBAC
CDP
CEP
certificate
certificate identity
CET
Cisco Router and Security Device Manager Version 2.2 User's Guide
GL-4
A digital certificate granted to one certification authority (CA) by another
certification authority.
A temporary repository of information accumulated from previous task
executions that can be reused, decreasing the time required to perform the tasks.
Context-based Access Control. Protocol that provides internal users with secure
access control for each application and for all traffic across network perimeters.
CBAC scrutinizes both source and destination addresses and tracks each
application connection status.
Cisco Discovery Protocol. A media- and protocol-independent device-discovery
protocol that runs on all Cisco-manufactured equipment including routers,
access servers, bridges, and switches. Using CDP, a device can advertise its
existence to other devices and receive information about other devices on the
same LAN or on the remote side of a WAN.
Certificate Enrollment Protocol. A certificate management protocol. CEP is an
early implementation of Certificate Request Syntax (CRS), a standard proposed
to the Internet Engineering Task Force (IETF). CEP specifies how a device
communicates with a CA, including how to retrieve the public key of the CA,
how to enroll a device with the CA, and how to retrieve a certificate revocation
list (CRL). CEP uses PKCS (Public Key Cryptography Standards) 7 and 10 as
key component technologies. The public key infrastructure working group
(PKIX) of the IETF is working to standardize a protocol for these functions,
either CRS or an equivalent. When an IETF standard is stable, Cisco will add
support for it. CEP was jointly developed by Cisco Systems and VeriSign, Inc.
See digital certificate.
An X.509 certificate contains within it information regarding the identity of
whichever device or entity possesses that certificate. The identification
information is then examined during each subsequent instance of peer
verification and authentication. However, certificate identities can be vulnerable
to spoofing attacks.
Cisco Encryption Technology. Proprietary network layer encryption introduced
in Cisco IOS Release 11.2. CET provides network data encryption at the IP
packet level and implements the following standards: DH, DSS, and 40- and
56-bit DES.
OL-4015-08