Page 416 / 428 Scroll up to view Page 411 - 415
Glossary of Terms
402
Check Point ZoneAlarm User Guide
D
DHCP
Any machine requires a unique IP
address to connect to the Internet using
Internet Protocol. Dynamic Host
Configuration Protocol (DHCP) is a
communications protocol that assigns
Internet Protocol (IP) addresses to
computers on the network.
DHCP uses the concept of a "lease" or
amount of time that a given IP address
will be valid for a computer.
DMZ
A DMZ (demilitarized zone) is an
internal network defined in addition to
the LAN network and protected by the
ZoneAlarm appliance.
DNS
The Domain Name System (DNS)
refers to the Internet domain names, or
easy-to-remember "handles", that are
translated into IP addresses.
An example of a Domain Name is
'www.sofaware.com'.
Domain Name System
Domain Name System. The Domain
Name System (DNS) refers to the
Internet domain names, or easy-to-
remember "handles", that are translated
into IP addresses.
An example of a Domain Name is
'www.sofaware.com'.
E
Exposed Host
An exposed host allows one computer
to be exposed to the Internet. An
example of using an exposed host
would be exposing a public server,
while preventing outside users from
getting direct access form this server
back to the private network.
F
Firmware
Software embedded in a device.
G
Gateway
A network point that acts as an entrance
to another network.
H
Hacking
An activity in which someone breaks
into someone else's computer system,
bypasses passwords or licenses in
computer programs; or in other ways
intentionally breaches computer
security. The end result is that whatever
resides on the computer can be viewed
and sensitive data can be stolen without
anyone knowing about it. Sometimes,
tiny programs are 'planted' on the
computer that are designed to watch out
for, seize and then transmit to another
computer, specific types of data.
Page 417 / 428
Glossary of Terms
Glossary of Terms
403
HTTPS
Hypertext Transfer Protocol over Secure
Socket Layer, or HTTP over SSL.
A protocol for accessing a secure Web
server. It uses SSL as a sublayer under
the regular HTTP application. This
directs messages to a secure port
number rather than the default Web port
number, and uses a public key to
encrypt data
HTTPS is used to transfer confidential
user information.
Hub
A device with multiple ports,
connecting several PCs or network
devices on a network.
I
IP Address
An IP address is a 32-bit number that
identifies each computer sending or
receiving data packets across the
Internet. When you request an HTML
page or send e-mail, the Internet
Protocol part of TCP/IP includes your
IP address in the message and sends it
to the IP address that is obtained by
looking up the domain name in the
Uniform Resource Locator you
requested or in the e-mail address you're
sending a note to. At the other end, the
recipient can see the IP address of the
Web page requestor or the e-mail sender
and can respond by sending another
message using the IP address it
received.
IP Spoofing
A technique where an attacker attempts
to gain unauthorized access through a
false source address to make it appear as
though communications have originated
in a part of the network with higher
access privileges. For example, a packet
originating on the Internet may be
masquerading as a local packet with the
source IP address of an internal host.
The firewall can protect against IP
spoofing attacks by limiting network
access based on the gateway interface
from which data is being received.
IPSEC
IPSEC is the leading Virtual Private
Networking (VPN) standard. IPSEC
enables individuals or offices to
establish secure communication
channels ('tunnels') over the Internet.
ISP
An ISP (Internet service provider) is a
company that provides access to the
Internet and other related services.
L
LAN
A local area network (LAN) is a group
of computers and associated devices
that share a common communications
line and typically share the resources of
a single server within a small
geographic area.
Page 418 / 428
Glossary of Terms
404
Check Point ZoneAlarm User Guide
M
MAC Address
The MAC (Media Access Control)
address is a computer's unique hardware
number. When connected to the Internet
from your computer, a mapping relates
your IP address to your computer's
physical (MAC) address on the LAN.
Mbps
Megabits per second. Measurement unit
for the rate of data transmission.
MTU
The Maximum Transmission Unit
(MTU) is a parameter that determines
the largest datagram than can be
transmitted by an IP interface (without
it needing to be broken down into
smaller units). The MTU should be
larger than the largest datagram you
wish to transmit un-fragmented. Note:
This only prevents fragmentation
locally. Some other link in the path may
have a smaller MTU - the datagram will
be fragmented at that point. Typical
values are 1500 bytes for an Ethernet
interface or 1452 for a PPP interface.
N
NAT
Network Address Translation (NAT) is
the translation or mapping of an IP
address to a different IP address. NAT
can be used to map several internal IP
addresses to a single IP address, thereby
sharing a single IP address assigned by
the ISP among several PCs.
Check Point FireWall-1's Stateful
Inspection Network Address Translation
(NAT) implementation supports
hundreds of pre-defined applications,
services, and protocols, more than any
other firewall vendor.
NetBIOS
NetBIOS is the networking protocol
used by DOS and Windows machines.
P
Packet
A packet is the basic unit of data that
flows from one source on the Internet to
another destination on the Internet.
When any file (e-mail message, HTML
file, GIF file etc.) is sent from one place
to another on the Internet, the file is
divided into "chunks" of an efficient
size for routing. Each of these packets is
separately numbered and includes the
Internet address of the destination. The
individual packets for a given file may
travel different routes through the
Internet. When they have all arrived,
they are reassembled into the original
file at the receiving end.
PPPoE
PPPoE (Point-to-Point Protocol over
Ethernet) enables connecting multiple
computer users on an Ethernet local area
network to a remote site or ISP, through
common customer premises equipment
(e.g. modem).
Page 419 / 428
Glossary of Terms
Glossary of Terms
405
PPTP
The Point-to-Point Tunneling Protocol
(PPTP) allows extending a local
network by establishing private
“tunnels” over the Internet. This
protocol it is also used by some DSL
providers as an alternative for PPPoE.
R
RJ-45
The RJ-45 is a connector for digital
transmission over ordinary phone wire.
Router
A router is a device that determines the
next network point to which a packet
should be forwarded toward its
destination. The router is connected to
at least two networks.
S
Server
A server is a program (or host) that
awaits and requests from client
programs across the network. For
example, a Web server is the computer
program, running on a specific host, that
serves requested HTML pages or files.
Your browser is the client program, in
this case.
Stateful Inspection
Stateful Inspection was invented by
Check Point to provide the highest level
of security by examining every layer
within a packet, unlike other systems of
inspection. Stateful Inspection extracts
information required for security
decisions from all application layers and
retains this information in dynamic state
tables for evaluating subsequent
connection attempts. In other words, it
learns!
Subnet Mask
A 32-bit identifier indicating how the
network is split into subnets. The subnet
mask indicates which part of the IP
address is the host ID and which
indicates the subnet.
T
TCP
TCP (Transmission Control Protocol) is
a set of rules (protocol) used along with
the Internet Protocol (IP) to send data in
the form of message units between
computers over the Internet. While IP
takes care of handling the actual
delivery of the data, TCP takes care of
keeping track of the individual units of
data (called packets) that a message is
divided into for efficient routing
through the Internet.
For example, when an HTML file is
sent to you from a Web server, the
Transmission Control Protocol (TCP)
program layer in that server divides the
file into one or more packets, numbers
the packets, and then forwards them
individually to the IP program layer.
Although each packet has the same
destination IP address, it may get routed
differently through the network.
Page 420 / 428
Glossary of Terms
406
Check Point ZoneAlarm User Guide
At the other end (the client program in
your computer), TCP reassembles the
individual packets and waits until they
have arrived to forward them to you as a
single file.
TCP/IP
TCP/IP (Transmission Control
Protocol/Internet Protocol) is the
underlying communication protocol of
the Internet.
U
UDP
UDP (User Datagram Protocol) is a
communications protocol that offers a
limited amount of service when
messages are exchanged between
computers in a network that uses the
Internet Protocol (IP). UDP is an
alternative to the Transmission Control
Protocol (TCP) and, together with IP, is
sometimes referred to as UDP/IP. Like
the Transmission Control Protocol,
UDP uses the Internet Protocol to
actually get a data unit (called a
datagram) from one computer to
another. Unlike TCP, however, UDP
does not provide the service of dividing
a message into packets (datagrams) and
reassembling it at the other end.
UDP is often used for applications such
as streaming data.
URL
A URL (Uniform Resource Locator) is
the address of a file (resource)
accessible on the Internet. The type of
resource depends on the Internet
application protocol. On the Web
(which uses the Hypertext Transfer
Protocol), an example of a URL is
V
VPN
A virtual private network (VPN) is a
private data network that makes use of
the public telecommunication
infrastructure, maintaining privacy
through the use of a tunneling protocol
and security procedures.
VPN tunnel
A secure connection between a Remote
Access VPN Client and a Remote
Access VPN Server.
W
WLAN
A WLAN is a wireless local area
network protected by the ZoneAlarm
router.

Rate

3.5 / 5 based on 2 votes.

Popular ZoneAlarm Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top