Extreme Networks NG300 User Manual page 94

Glossary
M
MAC Address
MAC Validation
management segment
manual escalation
masked source
monitor
N
native segment
network segment
NMAP
NTP
96
The low-level address consisting of a 48-bit hexadecimal number (12
characters) assigned to a device on an ethernet network. MAC
addresses are translated to IP Addresses via ARP. Each NIC is
assigned a unique address at the factory.
A process performed by the Sentriant NG that validates the low-level
address sent by a host consisting of a 48-bit hexadecimal number (12
characters) assigned to a device on an ethernet. MAC Addresses are
translated to IP Addresses via ARP. Each NIC is assigned a unique
address at the factory. In cases where MAC Addresses are found to be
spoofed, the Sentriant NG will trigger a rule that may either cloak,
snare, or send decoy information based on the rule that is triggered.
The segment identified during Sentriant NG configuration that will be
used to manage and monitor.
The Sentriant NG admin has chosen to manually respond to a specific
source IP Address as a potential threat and change the threat priority
to high, medium or low which will trigger a rule and configured
mitigation actions.
When a threat is detected by the Sentriant NG but the source of the
attack cannot be immediately determined, the source is referred to as
masked. This usually occurs during initial network segment startup
when the Sentriant NG has not yet learned all of the address mappings,
or when a spoofed packet is sent through a gateway utilizing a
protected IP Address.
The ability to detect and track suspicious and potentially threatening
network behavior across one or more network segments that are
under the protection of the Sentriant NG. Threat behavior can be
monitored whether it originates from a source inside or outside of the
Sentriant NG's protected range.
The portion of an ARP Horizon or Broadcast Domain that is native to
a switch and does not need Qtag identifiers since the IP Addresses are
not broadcast as a VLAN.
The portion of an ARP Horizon or Broadcast Domain that is protected
by the Sentriant NG. The segment has multiple attributes that are
necessary for proper operation that are configured using the Edit
Configuration for segments.
A network scanning/mapping tool used to determine the network
topology and type of network.
Network Time Protocol. A standard for synchronizing your system
clock with the "true time" defined as the average of many high-
accuracy clocks around the world.
Sentriant NG Operation Console User Guide, Software Version 2.5