Cisco IPS-4255-K9 Installation Guide - Page 382

Glossary IDAPI Intrusion Detection Application Programming Interface. Provides a simple interface between IPS architecture applications. IDAPI reads and writes event data and provides a mechanism for control transactions. IDCONF Intrusion Detection Configuration. A data format standard that defines operational messages that are used to configure intrusion detection and prevention systems. IDENT Ident protocol, specified in RFC 1413, is an Internet protocol that helps identify the user of a particular TCP connection. IDIOM Intrusion Detection Interchange and Operations Messages. A data format standard that defines the event messages that are reported by intrusion detection systems and the operational messages that are used to configure and control intrusion detection systems. IDM IPS Device Manager. A web-based application that lets you configure and manage your sensor. The web server for IDM resides on the sensor. You can access it through Internet Explorer or Firefox web browsers. IDMEF Intrusion Detection Message Exchange Format. The IETF Intrusion Detection Working Group draft standard. IDSM2 Intrusion Detection System Module. A switching module that performs intrusion detection in the Catalyst 6500 series switch. IDS MC Management Center for IDS Sensors. A web-based IDS manager that can manage configurations for up to 300 sensors. IME IPS Manager Express. A network management application that provides system health monitoring, events monitoring, reporting, and configuration for up to ten sensors. inline mode All packets entering or leaving the network must pass through the sensor. inline interface A pair of physical interfaces configured so that the sensor forwards all traffic received on one interface out to the other interface in the pair. InterfaceApp A component of the IPS. Handles bypass and physical settings and defines paired interfaces. Physical settings are speed, duplex, and administrative state. intrusion detection IDS. A security service that monitors and analyzes system events to find and provide real-time or near system real-time warning of attempts to access system resources in an unauthorized manner. IP address 32-bit address assigned to hosts using TCP/IP. An IP address belongs to one of five classes (A, B, C, D, or E) and is written as 4 octets separated by periods (dotted decimal format). Each address consists of a network number, an optional subnetwork number, and a host number. The network and subnetwork numbers together are used for routing, and the host number is used to address an individual host within the network or subnetwork. A subnet mask is used to extract network and subnetwork information from the IP address. IPS Intrusion Prevention System. A system that alerts the user to the presence of an intrusion on the network through network traffic analysis techniques. IPS data or message Describes the messages transferred over the command and control interface between IPS applications. GL-10 Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0 OL-18504-01