Glossary
signature library: A set of IDS signatures. Sygate provides a library of known signatures in the System Library, which can be kept
Administrators can also specify new attack signatures of their own choosing in custom libraries. See also System Library.
silent mode: The ability to hide the Sygate Security Agent user interface from the end user.
simple rule: A type of firewall rule that enables a system administrator to create security rules without having to define priorities, severities, triggers, and events. Examples of simple rules could be a rule that allows trusted applications, a rule that allows hosts, a rule that allows VPNs, etc. Simple rules have a default priority of 10, where 0 is the highest and 15 is the lowest priority. The names of simple rules begin with “Srg”. See also Advanced Rule.
Smart DHCP: Allows a Dynamic Host Configuration Protocol (DHCP) client to receive an IP address from a DHCP server while protecting the client against DHCP attacks from a network. If a Sygate Security Agent sends a DHCP request to a DHCP server, it waits for five seconds to allow for an incoming DHCP response. If a Sygate Security Agent does not send a DHCP request to a DHCP server, then Smart DHCP does not allow the packet. Smart DHCP does not block packets. It simply allows the packet if a DHCP request was made. Any other DHCP blocking or allowing is done by the normal security rule set. See also Dynamic Host Configuration Protocol (DHCP).
Smart DNS: Allows a Domain Name System (DNS) client to resolve a domain name from a DNS server while providing protection against DNS attacks from the network. This option blocks all Domain Name System (DNS) traffic except outgoing DNS requests and the corresponding reply. If a client computer sends a DNS request and another computer responds within five seconds, the communication is allowed. All other DNS packets are dropped. Smart DNS does not block any packets; blocking is done by the normal security rule set.
Smart WINS: Allows Windows Internet Naming Service (WINS) requests only if they have been requested. If the traffic is not requested, the WINS reply is blocked.
sniffing: The process of actively capturing datagram and packet information from a selected network. Sniffing acquires all network traffic regardless of where the packets are addressed.
source IP address: The IP address from which the traffic originated. See also IP address.
source port: The port number on which the traffic originated. See also port.
61