Tacacs, Static pat, Tapi – Cisco ASA 5505 User Manual

Page 1957: Encrypted v

Advertising
background image

Glossary

GL-19

Cisco ASA 5500 Series Configuration Guide using the CLI

spoofing

A type of attack designed to foil network security mechanisms such as filters and access lists. A
spoofing attack sends a packet that claims to be from an address from which it was not actually sent.

SQL*Net

Structured Query Language Protocol. An Oracle protocol used to communicate between client and
server processes.

SSC

Security Services Card for the ASA 5505. For example, the AIP SSC.

SSH

Secure Shell. An application running on top of a reliable transport layer, such as TCP/IP, that provides
strong authentication and encryption capabilities.

SSL

Secure Sockets Layer. A protocol that resides between the application layer and TCP/IP to provide
transparent encryption of data traffic.

SSM

Security Services Module. For example, the AIP SSM or CSC SSM.

standby unit

See

secondary unit

.

stateful inspection

Network protocols maintain certain data, called state information, at each end of a network connection
between two hosts. State information is necessary to implement the features of a protocol, such as
guaranteed packet delivery, data sequencing, flow control, and transaction or session IDs. Some of the
protocol state information is sent in each packet while each protocol is being used. For example, a
browser connected to a web server uses

HTTP

and supporting TCP/IP protocols. Each protocol layer

maintains state information in the packets it sends and receives. The ASA and some other firewalls
inspect the state information in each packet to verify that it is current and valid for every protocol it
contains. This feature is called stateful inspection and is designed to create a powerful barrier to
certain types of computer security threats.

Static PAT

Static Port Address Translation. Static PAT is a static address that also maps a local port to a global
port. See also

Dynamic PAT

,

NAT

.

subnetmask

See

mask

.

T

TACACS+

Terminal Access Controller Access Control System Plus. A client-server protocol that supports

AAA

services, including command authorization. See also

AAA

,

RADIUS

.

TAPI

Telephony Application Programming Interface. A programming interface in Microsoft Windows that
supports telephony functions.

TCP

Transmission Control Protocol. Connection-oriented transport layer protocol that provides reliable
full-duplex data transmission.

Advertising