Watchguard Firebox X1000, Reference Manual

Page: 131 / 264

Reference Guide 119
the Trusted interface being reconfigured. This protects a single
network that is not subdivided into smaller networks.
drop-in network
A configuration that allows for distribution of logical address
space across the Firebox interface.
DSA (Digital Signature Algorithm)
A public key digital signature algorithm proposed by the National
Institute of Standards and Technology for DSS.
DSS (Digital Signature Standard)
A standard for digital signatures using DSA proposed by the
National Institute of Standards and Technology.
DVCP (Dynamic VPN Configuration Protocol)
A WatchGuard proprietary protocol that simplifies configuration
of VPNs.
dynamic NAT
(Also known as IP masquerading or port address translation) A
method of hiding network addresses from hosts on the external
network. Hosts elsewhere on the Internet see only outgoing
packets from the Firebox itself.
dynamic packet filtering
Filtering based not only on service types, but also on conditions
surrounding the initiation of a connection.
ECC (Elliptic Curve Cryptosystem)
A method for creating public key algorithms based on
mathematical curves over finite fields or with large prime
numbers.
encryption
The process of disguising a message to hide its substance.
entropy
A mathematical measurement of the amount of uncertainty or
randomness.
ESMTP (Extended Simple Mail Transfer Protocol)
A protocol that provides extensions to SMTP for sending email
that supports graphics, audio, and video files, and text in various
foreign languages.