Cisco IPS-4240-K9 - Intrusion Protection Sys 4240 Installation Manual page 172

Glossary
In SNMP, a logical group of managed devices and NMSs in the same administrative domain.
community
Spans multiple packets in a single session. Examples include most conversation attacks such as FTP,
composite attack
Telnet, and most Regex-based attacks.
Network Access Controller blocks traffic from a given source IP address to a given destination IP
connection block
address and destination port.
A terminal or laptop computer used to monitor and control the sensor.
console
An RJ45 or DB9 serial port on the sensor that is used to connect to a console device.
console port
When Network Access Controller opens a Telnet or SSH session with a network device, it uses one of
control interface
the device's routing interfaces as the remote IP address. This is the control interface.
An IPS message containing a command addressed to a specific application instance. Example control
control transaction
transactions include start, stop, getConfig.
A piece of information sent by a web server to a web browser that the browser is expected to save and
cookie
send back to the web server whenever the browser makes additional requests of the web server.
Cisco Threat Response. See Threat Response.
CTR
D
See DBP.
Database Processor
Logical grouping of information sent as a network layer unit over a transmission medium without prior
datagram
establishment of a virtual circuit. IP datagrams are the primary information units in the Internet. The
terms cell, frame, message, packet, and segment also are used to describe logical information groupings
at various layers of the OSI reference model and in various technology circles.
Database Processor. Maintains the signature state and flow databases.
DBP
data circuit-terminating equipment (ITU-T expansion). Devices and connections of a communications
DCE
network that comprise the network end of the user-to-network interface. The DCE provides a physical
connection to the network, forwards traffic, and provides a clocking signal used to synchronize data
transmission between DCE and DTE devices. Modems and interface cards are examples of DCE.
See DFP.
Deny Filters
Processor
Data Encryption Standard. A strong encryption method where the strength lies in a 56-bit key rather
DES
than an algorithm.
Address of a network device that is receiving data.
destination address
Deny Filters Processor. Handles the deny attacker functions. It maintains a list of denied source IP
DFP
addresses.
Dual In-line Memory Modules.
DIMM.
Installing Cisco Intrusion Prevention System Appliances and Modules 5.0
GL-4
78-16124-01