Glossary
GL-13
Cisco Intrusion Prevention System Appliance Hardware Installation Guide for IPS 7.1
OL-24002-01
MD5
Message Digest 5. A one-way hashing algorithm that produces a 128-bit hash. Both MD5 and Secure
Hash Algorithm (SHA) are variations on MD4 and strengthen the security of the MD4 hashing
algorithm. Cisco uses hashes for authentication within the IPSec framework. Also used for message
authentication in SNMP v.2. MD5 verifies the integrity of the communication, authenticates the origin,
and checks for timeliness.
Meta engine
Defines events that occur in a related manner within a sliding time interval. This engine processes
events rather than packets.
MIB
Management Information Base. Database of network management information that is used and
maintained by a network management protocol, such as SNMP or CMIP. The value of a MIB object can
be changed or retrieved using SNMP or CMIP commands, usually through a GUI network management
system. MIB objects are organized in a tree structure that includes public (standard) and private
(proprietary) branches.
MIME
Multipurpose Internet Mail Extension. Standard for transmitting nontext data (or data that cannot be
represented in plain ASCII code) in Internet mail, such as binary, foreign language text (such as
Russian or Chinese), audio, or video data. MIME is defined in RFC 2045.
minor update
A minor version that contains minor enhancements to the product line. Minor updates are incremental
to the major version, and are also base versions for service packs.
module
A removable card in a switch, router, or security appliance chassis. The ASA 5500 AIP SSM and
ASA 5585-X IPS SSP are IPS modules.
monitoring
interface
See sensing interface.
MPF
Modular Policy Framework. A means of configuring security appliance features in a manner similar to
Cisco IOS software Modular QoS CLI.
MSFC, MSFC2
Multilayer Switch Feature Card. An optional card on a Catalyst 6000 supervisor engine that performs
L3 routing for the switch.
MSRPC
Microsoft Remote Procedure Call. MSRPC is the Microsoft implementation of the DCE RPC
mechanism. Microsoft added support for Unicode strings, implicit handles, inheritance of interfaces
(which are extensively used in DCOM), and complex calculations in the variable-length string and
structure paradigms already present in DCE/RPC.
MySDN
My Self-Defending Network. A part of the signature definition section of IDM and IME. It provides
detailed information about signatures.
N
NAC
Network Access Controller. See ARC.
NAS-ID
Network Access ID. An identifier that clients send to servers to communicate the type of service they
are attempting to authenticate.
NAT
Native Address Translation. A network device can present an IP address to the outside networks that is
different from the actual IP address of a host.
Comments to this Manuals