Watchguard Firebox X20E Reference Manual page 64

drop-in configuration
A configuration in which the Firebox is physically located between the router
and the LAN without any of the computers on the Trusted interface being
reconfigured. This protects a single network that is not subdivided into
smaller networks.
drop-in network
This configuration allows for distribution of logical address space across the
Firebox interface.
DVCP (Dynamic VPN Configuration Protocol)
A WatchGuard proprietary protocol that simplifies configuration of VPNs.
dynamic NAT
Dynamic NAT is also known as IP masquerading or port address translation.
It hides network addresses from hosts on the external network. Hosts
elsewhere on the Internet see only outgoing packets from the Firebox itself.
dynamic packet filtering
Filtering based not only on service types, but also on conditions surrounding
the initiation of a connection.
encryption
The translation of data into a secret code. To read an encrypted file, you must
use a key or password that enables decryption.
ESP (Encapsulation Security Payload)
A protocol used in IPSec available for use with IPSec Branch Office VPN. ESP
encapsulates and authenticates IP packets to be passed over the tunnel,
providing confidentiality, data integrity, and origin authentication. ESP is
similar to AH, except that it provides encryption.
Event Processor
See LiveSecurity Event Processor.
expand
To display all subordinate entries in an outline or in a folder.
extension
See file extension.
External interface
An interface connected to the external network that presents the security
challenge, typically the Internet.
failover
Configuration that allows a secondary machine to take over in the event of a
failure in the first machine, thus allowing normal use to return or continue.
fail-shut mode
A condition in which a firewall blocks all incoming and outgoing traffic in the
event of a firewall failure. This is the opposite of fail-open mode, in which a
60