Lanner nca-5510 User Manual page 78

Network Computing Platforms
an Intel hardware-based protection against malicious code. It will
Execute Disable Bit:
detect the memory in which a code can be executed or not. When enabled, it will prevent
certain classes of malicious buffer overflow attacks when combined with a supporting OS.
When disabled, it forces the XD feature flag to always return 0.
enables or disables AES-NI (Advanced Encryption Standard - New Instruction)
AES-NI:
support.