Cisco PIX 525 Especificaciones descargar pdf (Pagina 577)

Glossary

GL-9

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

inspection engine

The security appliance inspects certain application-level protocols to identify the location of

embedded addressing information in traffic. This allows NAT to translate these embedded addresses

and to update any checksum or other fields that are affected by the translation. Because many

protocols open secondary TCP or UDP ports, each application inspection engine also monitors

sessions to determine the port numbers for secondary channels. The initial session on a well-known

port is used to negotiate dynamically assigned port numbers. The application inspection engine

monitors these sessions, identifies the dynamic port assignments, and permits data exchange on these

ports for the duration of the specific session. Some of the protocols that the security appliance can

inspect are CTIQBE, FTP, H.323, HTTP, MGCP, SMTP, and SNMP.

interface

The physical connection between a particular network and a security appliance.

interface ip_address

The IP address of a security appliance network interface. Each interface IP address must be unique.

Two or more interfaces must not be given the same IP address or IP addresses that are on the same IP

network.

interface names

Human readable name assigned to a security appliance network interface. The inside interface default

name is “inside” and the outside interface default name is “outside.” Any perimeter interface default

names are “intfn”, such as intf2 for the first perimeter interface, intf3 for the second perimeter

interface, and so on to the last interface. The numbers in the intf string corresponds to the position of

the interface card in the security appliance. You can use the default names or, if you are an experienced

user, give each interface a more meaningful name. See also inside, intfn, outside.

intfn

Any interface, usually beginning with port 2, that connects to a subset network of your design that you

can custom name and configure.

interface PAT

The use of PAT where the PAT IP address is also the IP address of the outside interface. See Dynamic

PAT, Static PAT.

Internet

The global network that uses IP. Not a LAN. See also intranet.

intranet

Intranetwork. A LAN that uses IP. See also network and Internet.

Internet Protocol. IP protocols are the most popular nonproprietary protocols because they can be used

to communicate across any set of interconnected networks and are equally well suited for LAN and

WA N communications.

IPS

Intrusion Prevention Service. An in-line, deep-packet inspection-based solution that helps mitigate a

wide range of network attacks.

IP address

An IP protocol address. A security appliance interface ip_address. IP version 4 addresses are 32 bits

in length. This address space is used to designate the network number, optional subnetwork number,

and a host number. The 32 bits are grouped into four octets (8 binary bits), represented by 4 decimal

numbers separated by periods, or dots. The meaning of each of the four octets is determined by their

use in a particular network.

IP pool

A range of local IP addresses specified by a name, and a range with a starting IP address and an ending

address. IP Pools are used by DHCP and VPNs to assign local IP addresses to clients on the inside

interface.

1 2 ... 572 573 574 575 576 577 578 579 580 581 582 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 577

Comentarios a estos manuales