Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 578

Glossary
I
Incidents are collections of events and sessions that meet the criteria for a rule, having helped to cause
Incident
it to fire.
An instance of an incident.
Incident Instances
M
management information base
MI B
To stop a detected attack or anomaly. The method of mitigation varies based on network composition
mitigate
and configuration.
O
The offset of a firing event is the line number of the rule criteria that this firing event matches.
Offset
P
Session endpoints.
Pre NAT Source
Address
The source as appearing at the destination.
Post NAT Source
Address
Session endpoints.
Post NAT
Destination Address
The destination as appearing at the source.
Pre NAT Destination
Address
Q
A user-defined request to the database for information.
Query
R
A user-defined request to the database on an automatic or on-demand basis.
Report
A discovered device that reports information – usually in the form of logs – to a MARS STM appliance.
Reporting Device
User Guide for Cisco Security MARS Local Controller
GL-2
78-17020-01