Extreme Networks NG300 User Manual page 97

Q
Qtag
R
radial view
response
rollback
rule
rule set
S
segment set
slow scanning
SMTP
SOC
Sentriant NG Operation Console User Guide, Software Version 2.5
The Institute of Electrical and Electronics Engineers (IEEE) standard
802.1Q enables VLAN traffic to span many broadcast domains or
switches. It does this by inserting a special Qtag that carries a VLAN
identifier (VID) into each Ethernet frame. This tagged traffic carries
VLAN membership information between switches, thus enabling a
VLAN to span multiple switches.
Displays the entire enterprise deployment graphically like the spokes
of a wheel. The center of the wheel is the highest domain level. Each
spoke represents a branch of the network. Appliances are located at
the end of each branch.
The action taken by the Sentriant NG, using configurable rules, to
counter potential worms or viruses that may attack or infect hosts.
Rules are configured that look inside individual packets for suspicious
behavior. If a rule is triggered, a mitigation action, or response, may
be taken either automatically or manually.
The act of applying a previously saved configuration policy to a
Sentriant NG appliance.
Rules are what drive the detection and response actions of the
Sentriant NG. Once a segment is configured and is being monitored
by the Sentriant NG, configurable rules are created to detect and
respond to malicious network activity.
A collection of rules assigned to a segment set.
A Segment Set is a collection of segments that exhibit similar policy
behaviors. For example, if a Segment Set is reserved for DHCP clients
(laptops), then a set can be created containing all laptops within a
segment and then parameters can be set for rules, deception
distributions and modifiers. Creating segments is accomplished using
the Segment Assistant.
A tactic employed by the Sentriant NG specifically designed to
significantly increase the time it takes for an external host to scan the
monitored network, causing the attacker to consume time and
resources. This feature is only enabled when deception is turned on
and slow scan is part of a configured personality.
Simple Mail Transport Protocol - A TCP-based application layer, Internet
standard protocol for sending e-mail messages between servers. The
Sentriant NG uses it to send alerts and allows remote monitoring.
Acronym for Sentriant NG Operation Console.
Q
99