Cisco Systems IPS4520K9 manual Communication networks, To legitimate users, Addresses, GL-6

Glossary

cookie

CSA MC

CSM

CS-MARS

cut-through architecture

CVE

A piece of information sent by a web server to a web browser that the browser is expected to save and send back to the web server whenever the browser makes additional requests of the web server.

Cisco Security Agent Management Center. CSA MC receives host posture information from the CSA agents it manages. It also maintains a watch list of IP addresses that it has determined should be quarantined from the network.

Cisco Security Manager, the provisioning component of the Cisco Self-Defending Networks solution. CS-Manager is fully integrated with CS-MARS.

Cisco Security Monitoring, Analysis and Reporting System. The monitoring component of the Cisco Self-Defending Networks solution. CS-MARS is fully integrated with CS-Manager

Cut-through architecture is one method of design for packet-switching systems. When a packet arrives at a switch, the switch starts forwarding the packet almost immediately, reading only the first few bytes in the packet to learn the destination address. This technique improves performance

Common Vulnerabilities and Exposures. A list of standardized names for vulnerabilities and other information security exposures maintained at http://cve.mitre.org/.

D

darknets	A virtual private network where users connect only to people they trust. In its most general meaning, a
	darknet can be any type of closed, private group of people communicating, but the name is most often
	used specifically for file-sharing networks. Darknet can be used to refer collectively to all covert
	communication networks.
Database Processor A processor in the IPS. Maintains the signature state and flow databases.
datagram	Logical grouping of information sent as a network layer unit over a transmission medium without prior
	establishment of a virtual circuit. IP datagrams are the primary information units in the Internet. The
	terms cell, frame, message, packet, and segment also are used to describe logical information groupings
	at various layers of the OSI reference model and in various technology circles.
DCE	data circuit-terminating equipment (ITU-T expansion). Devices and connections of a communications
	network that comprise the network end of the user-to-network interface. The DCE provides a physical
	connection to the network, forwards traffic, and provides a clocking signal used to synchronize data
	transmission between DCE and DTE devices. Modems and interface cards are examples of DCE.
DCOM	Distributed Component Object Model. Protocol that enables software components to communicate
	directly over a network. Developed by Microsoft and previously called Network OLE, DCOM is
	designed for use across multiple network transports, including such Internet protocols as HTTP.
DDoS	Distributed Denial of Service. An attack in which a multitude of compromised systems attack a single
	target, thereby causing denial of service for users of the targeted system. The flood of incoming
	messages to the target system essentially forces it to shut down, thereby denying service to the system
	to legitimate users.
Deny Filters	A processor in the IPS. Handles the deny attacker functions. It maintains a list of denied source IP
Processor	addresses.

	Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
GL-6	OL-24002-01