
Glossary
312 X Family LSM User’s Guide V 2.5.1
attack has gathered data by probing your system and scanning your network, it continues with pointed
attacks against those vulnerabilities. Reconnaissance filters look for these patterns and alert either the
LSM or the SMS when an attack is detected. Port Scan/Host Sweep filters (see page 311) filters are
included in this category. These filters are part of the Application Protection
filter category.
RIP (Routing Information Protocol, RFC 2453)
RIP (Routing Information Protocol, RFC 2453) is a dynamic protocol that uses a distance vector
algorithm to communicate route information with other routers in the network. RIP is well suited to
small networks and uses a single metric hop count to determine distances. RIP periodically sends
route advertisments every 30 seconds using UDP broadcast or multicast packets. The best route to a
destination will be the one that passes through the fewest number of routers (lowest hop count) to
reach its destination. A destination with a metric of 16 hops or more is considered to be unreachable
or of infinite distance.
Security Management System (SMS)
A Linux management server and Java-based client application for managing multiple
X family device
s. It
provides coordination across your system for administration, configuration, and monitoring, attack
filter customization, centralized distribution of upgrades, and enterprise-wide reporting and trend
analysis.
Security Profiles
A security profile is used to set up Digital Vaccine filters to monitor traffic passing on one or more
virtual segments. The profile consists of category settings for the DV filters along with any user-
defined filter overrides and IP address limits/exceptions. After a security profile is created, the device
will begin monitoring traffic on the segments included in the profile using the specified the filter
settings.
Security Policy
Security Policy refers to all of the mechanisms available on the device to protect and manage network
traffic including traffic management profiles, security profiles (Digital Vaccine Filters), DDoS and
Traffic Threshold filters. These profiles and filters are configured based on your network deployment
and operational policy.
security zone
A security zone is a section of the network which is associated with a port or VLAN. Security zones
enable you to logically segment your networks so that the X family device can apply policy rules and
IPS filters to control the traffic passing between the zones.
SNMP Server
Provides access to interface counters and other statistics, configuration data, and general system
information via the Simple Network Management Protocol (SNMP). The SNMP server must be
enabled to use SMS management or to allow NMS access.
spyware filters
Spyware filters detect and block downloads, communications and popups sent via spyware.
Kommentare zu diesen Handbüchern