Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual page 391

SFR. A weight associated with how well a signature might perform in the absence of specific
signature fidelity
knowledge of the target. The signature fidelity rating is configured per signature and indicates how
rating
accurately the signature detects the event or condition it describes.
Executable file that contains a set of rules designed to recognize malicious network activities, such as
signature update
worms, DDOS, viruses, and so forth. Signature updates are released independently, are dependent on a
required signature engine version, and have their own versioning scheme.
A processor in the IPS. Process found on dual CPU systems.
Slave Dispatch
Processor
Server Message Block. File-system protocol used in LAN manager and similar NOSs to package data
SMB
and exchange information with other systems.
Simple Mail Transfer Protocol. Internet protocol providing e-mail services.
SMTP
Serial Number. Part of the UDI. The SN is the serial number of your Cisco product.
SN
Subnetwork Access Protocol. Internet protocol that operates between a network entity in the
SNAP
subnetwork and a network entity in the end system. SNAP specifies a standard method of encapsulating
IP datagrams and ARP messages on IEEE networks. The SNAP entity in the end system makes use of
the services of the subnetwork and performs three key functions: data transfer, connection
management, and QoS selection.
See sensing interface.
sniffing interface
Simple Network Management Protocol. Network management protocol used almost exclusively in
SNMP
TCP/IP networks. SNMP provides a means to monitor and control network devices, and to manage
configurations, statistics collection, performance, and security.
SNMP Version 2. Version 2 of the network management protocol. SNMP2 supports centralized and
SNMP2
distributed network management strategies, and includes improvements in the SMI, protocol
operations, management architecture, and security.
Passes traffic through the IPS system without inspection.
software bypass
Address of a network device that is sending data.
source address
Switched Port Analyzer. Feature of the Catalyst 5000 switch that extends the monitoring abilities of
SPAN
existing network analyzers into a switched Ethernet environment. SPAN mirrors the traffic at one
switched segment onto a predefined SPAN port. A network analyzer attached to the SPAN port can
monitor traffic from any other Catalyst switched port.
Loop-free subset of a network topology.
spanning tree
Structured Query Language. International standard language for defining and accessing relational
SQL
databases.
Type of RAM that retains its contents for as long as power is supplied. SRAM does not require constant
SRAM
refreshing, like DRAM.
Secure Shell. A utility that uses strong authentication and secure communications to log in to another
SSH
computer over a network.
OL-18504-01
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Glossary
GL-19