Cisco IPS-4255-K9 Installation Guide - Page 391

Glossary signature fidelity rating signature update Slave Dispatch Processor SMB SMTP SN SNAP sniffing interface SNMP SNMP2 software bypass source address SPAN spanning tree SQL SRAM SSH SFR. A weight associated with how well a signature might perform in the absence of specific knowledge of the target. The signature fidelity rating is configured per signature and indicates how accurately the signature detects the event or condition it describes. Executable file that contains a set of rules designed to recognize malicious network activities, such as worms, DDOS, viruses, and so forth. Signature updates are released independently, are dependent on a required signature engine version, and have their own versioning scheme. A processor in the IPS. Process found on dual CPU systems. Server Message Block. File-system protocol used in LAN manager and similar NOSs to package data and exchange information with other systems. Simple Mail Transfer Protocol. Internet protocol providing e-mail services. Serial Number. Part of the UDI. The SN is the serial number of your Cisco product. Subnetwork Access Protocol. Internet protocol that operates between a network entity in the subnetwork and a network entity in the end system. SNAP specifies a standard method of encapsulating IP datagrams and ARP messages on IEEE networks. The SNAP entity in the end system makes use of the services of the subnetwork and performs three key functions: data transfer, connection management, and QoS selection. See sensing interface. Simple Network Management Protocol. Network management protocol used almost exclusively in TCP/IP networks. SNMP provides a means to monitor and control network devices, and to manage configurations, statistics collection, performance, and security. SNMP Version 2. Version 2 of the network management protocol. SNMP2 supports centralized and distributed network management strategies, and includes improvements in the SMI, protocol operations, management architecture, and security. Passes traffic through the IPS system without inspection. Address of a network device that is sending data. Switched Port Analyzer. Feature of the Catalyst 5000 switch that extends the monitoring abilities of existing network analyzers into a switched Ethernet environment. SPAN mirrors the traffic at one switched segment onto a predefined SPAN port. A network analyzer attached to the SPAN port can monitor traffic from any other Catalyst switched port. Loop-free subset of a network topology. Structured Query Language. International standard language for defining and accessing relational databases. Type of RAM that retains its contents for as long as power is supplied. SRAM does not require constant refreshing, like DRAM. Secure Shell. A utility that uses strong authentication and secure communications to log in to another computer over a network. OL-18504-01 Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0 GL-19