Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1, Руководство пользователя

Страница: 231 / 246

STRM Users Guide
A
G
LOSSARY
Autonomous System
Number Collection of IP networks that all adhere to the same specific and clearly defined
routing policy. An AS number (ASN) is a unique ID number assigned to each
Autonomous System.
active sub-filters Displays any filtering that has been applied to grouped data found in the Search
Flows results table. This box appears between the Change To box and Format box
when using the View Flows function.
Address Resolution
Protocol (ARP) A protocol for mapping an Internet Protocol (IP) address to a physical machine
address recognized in the local network. For example, in IP Version 4, an address
is 32 bits long. In an Ethernet LAN, however, addresses for attached devices are
48 bits long.
alert A message sent or event generated in response to a monitored condition. For
example, an alert informs you if a policy has been breached or the network is
under attack.
anomaly A deviation from expected behavior of the network.
anomaly sentry Monitors your deployment for any abnormal activity. The algorithm detects the
existence of new or unknown traffic, which is traffic that suddenly ceases or a
percentage change in the amount of time an object is active.
application signature A unique set of characteristics or properties, derived by the examination of packet
payload, used to identify a specific application.
application view A Global View that allows you to view client and server network activity by
application.
ARP See Address Resolution Protocol.
ARP Redirect ARP allows a host to determine the address of other devices on the LAN or VLAN.
A host can use ARP to identify the default gateway (router) or path off to the VLAN.
ARP Redirect allows STRM to notify a host if a problem exists with sending traffic
to a system. This renders the host and network unusable until the user intervenes.
ASN See Autonomous System Number.