Glossary of Terms

From Edge Threat Management Wiki - Arista
Jump to navigationJump to search

The Glossary of Terms - Wiki


  • ACLs - Access Control lists - Who has access or what machines have access
    • ACEs - Access Control Entries
  • AD - Active Directory (for Windows Servers)
    • See LDAP
    • CN - Common Name
    • DN - Distinguished Name
    • GPO - Group Policy Object
    • Forest -
    • Global Catalogs - is partial read-only copy of all the domain naming contecs (NCs) in a forest
    • OU - Organizational Units == Organizational Units (OU’s) within an Active Directory are a way to delegate control over part of the directory to a user or group of users
      • Account OUs
      • Workstations OUs
      • Resources OUs
      • Application OUs
      • Project OUs
  • ADLS - Active Directory Lookup Script - a script run on the host machines that notifies NG Firewall when users login.
    • SIDs - Security Identifiers


  • BackScatter - Email Spam - Spam sent as bounce messages. wikipedia
  • Black List - A list of names, domains, IPs, and or URLS that are blocked by SMTP, Web content Control, Spyware or Spam


  • Casing - The wrapper around the stream that parses protocols for the apps.
  • ClamAV - Clam Antivirus Open source product NG Firewall uses in Virus Blocker Lite


  • DMZ - a demilitarized zone (DMZ) or perimeter network is a network area (a subnetwork) that sits between an organization's internal network and an external network.
  • DNSBL - DNS Blacklist (similar to RBL Real-time Blackhole List). Also see Tarpit.



  • FOSS - Free Open Source Software



  • Hub - AKA Network Hub: An Ethernet hub or concentrator is a device for connecting multiple twisted pair or fiber optic Ethernet devices together, making them act as a single segment. Hubs work at the physical layer (layer 1) of the OSI model Hubs


  • IP Masquerading - See NAT
  • IP Matcher syntax - see Network Syntax.





  • MTA - Mail Transfer Agent /SMTP Daemon Mail Server MTA


  • NAS - Network attached storage. NAS Wiki
  • NAT - Network Address Translation NAT
  • Node - Another name for an app. in regards to UVM node - Node refers to a component instance deployed within the UVM (Virus Blocker, Web Filter)



  • Packet - A segment of data sent from one computer or network device to another computer or network device over a network. Packets may contain such information as its source, destination, size and other useful information, helping the packet get to its destination.
  • Port - When referring to a network or to the Internet, a software or network port is a location where information is sent through. A commonly used and accessed port is port 80, which is the http port. A listing of commonly known and used ports can also be found on the below listing. Users running Microsoft Windows can utilize the netstat command to view currently active connections that include ports currently being used. Ports
    • Common Port Mappings Ports
  • Port Matcher syntax - see Network Syntax


  • Quarantine - a storage area where undelivered spam can be kept and a user MAY be able to review and release the quarantined messages.


  • Router - Routes data packets across a internetwork towards their destination (see Router).


  • Spam - any message where its score is equal to or greater than the specified threshold. Email Spam
  • SNORT - Software network intrusion detection and prevention system SNORT Software / Rules used in Intrusion Prevention SNORT RULES
  • Switch - Almost identical to Network HUB, but a switch contains more "intelligence" (and a slightly higher price tag) than a network hub. Network switches are capable of inspecting data packets as they are received, determining the source and destination device of that packet, and forwarding it appropriately. By delivering each message only to the connected device it was intended for, a network switch conserves network bandwidth and offers generally better performance than a hub. - Switches


  • Tarpit - Historically, a tarpit attempts to bog down a known spam site (determined by DNSBL) by delaying the response to a connection attempt. Currently, for NG Firewall, tarpit is a somewhat of a misnomer because connection attempts from sites in the DNSBL are immediately rejected. DSNBL


  • UDP - User Datagram Protocol is a minimal message-oriented transport layer protocol that is currently documented in IETF RFC 768. Applications that use UDP are; Domain Name Service, Online games, VoIP, Streaming Media such as Video, Audio.
  • UVM - Untangle Virtual Machine - the core of the platform!