Cisco PIX 500 Series Configuration Manual page 1094

Glossary
Application Profile Customization Framework. Lets the security appliance handle non-standard
APCF
applications so that they render correctly over a WebVPN connection.
Address Resolution Protocol. A low-level TCP/IP protocol that maps a hardware address, or MAC
ARP
address, to an IP address. An example hardware address is 00:00:a6:00:01:ba. The first three groups of
characters (00:00:a6) identify the manufacturer; the rest of the characters (00:01:ba) identify the
system card. ARP is defined in RFC 826.
Adaptive Security Algorithm. Used by the security appliance to perform inspections. ASA allows
ASA
one-way (inside to outside) connections without an explicit configuration for each internal system and
application. See also
adaptive security appliance.
ASA
Adaptive Security Device Manager. An application for managing and configuring a single security
ASDM
appliance.
Also called public key systems, asymmetric encryption allows anyone to obtain access to the public
asymmetric
key of anyone else. Once the public key is accessed, one can send an encrypted message to that person
encryption
using the public key. See also encryption,
Cryptographic protocols and services that verify the identity of users and the integrity of data. One of
authentication
the functions of the
ensures that it is not tampered with in transit. It also provides confirmation about the origin of the
datastream. See also AAA, encryption, and VPN.
Automatically downloads the WebVPN port-forwarding applet when the user first logs in to WebVPN.
Auto Applet
Download
This command provides a single sign-on method for WebVPN users. It passes the WebVPN login
auto-signon
credentials (username and password) to internal servers for authentication using NTLM authentication,
basic authentication, or both.
B
IPSec backup servers let a VPN client connect to the central site when the primary security appliance
Backup Server
is unavailable.
Border Gateway Protocol. BGP performs interdomain routing in TCP/IP networks. BGP is an Exterior
BGP
Gateway Protocol, which means that it performs routing between multiple autonomous systems or
domains and exchanges routing and access information with other BGP systems. The security
appliance does not support BGP. See also EGP.
Bandwidth Limited Traffic stream. Stream or flow of packets whose bandwidth is constrained.
BLT stream
Bootstrap Protocol. Lets diskless workstations boot over the network as is described in RFC 951 and
BOOTP
RFC 1542.
Bridge Protocol Data Unit. Spanning-Tree Protocol hello packet that is sent out at configurable
BPDU
intervals to exchange information among bridges in the network. Protocol data unit is the OSI term for
packet.
Cisco Security Appliance Command Line Configuration Guide
GL-2
inspection engine.
public
IPSec framework. Authentication establishes the integrity of datastream and
key.
OL-12172-03