Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Glossary
DMZ (demilitarized zone) A network buffer zone that generally hosts services that require interaction
with Internet traffic, while still protecting internal systems. On Sidewinder, the
DMZ is generally a burb for hosting Web servers and other hosts that
receiving large volumes of external, untrusted traffic.
DNS (domain name
system)
672
A TCP/IP service that maps domain and host names to IP addresses, IP
addresses to domain and host names, and provides information about
services and points of contact in a network or the Internet. A set of connected
name servers and resolvers allows users to use a host name rather a 32-bit
Internet address.
domain (1) Relative to networking, the portion of an Internet address that denotes the
name of a computer network. For instance, in the e-address
jones@example.sales.com, the domain is example.sales.com. (2) Relative to
Type Enforcement, an attribute applied to a process running on SecureOS
that determines which system operation the process may perform.
DoS (denial of service) Event in which a network experiences a loss of a service, like e-mail or a Web
server, that is expected to be available. This event is generally caused by a
malicious attack, but may also happen accidentally.
DSS (defender security
server)
A server made by AssureNet Pathways that can be used to authenticate users
attempting connections through (or to) the Sidewinder G2. See also
SecureNet Key (SNK).
dynamic password The unique one–time response to a log in challenge or special code
presented by an authentication server. Each password is obtained using a
software or hardware authenticator that communicates with a password
generator.
editor A program that can be used to create or modify text files. See also file editor.
encryption Data encryption uses a secret code to scramble information so that it can be
read only by computers using the same code or encryption technology. While
encryption reduces the risk of unauthorized access, it does not create a totally
safe networking environment on its own.
end user See user.
event response A response to an alarm event that includes notifying the administrator and/or
performing a Strikeback.
extended authentication
(XAUTH)
An extension of the IKE protocol. It provides a mechanism to employ an
administrator–selected authentication mechanism in addition to the existing
IKE authentication (that is, in addition to certificate based or pre-shared key
authentication). It initiates after the existing IKE authentication mechanism is
successful. XAUTH enables use of strong authentication (sometimes referred
to as legacy authentication) in VPN configurations.