User's Manual

Fortress ES-Series CLI Guide: Glossary
XIV
CA
Certificate Authority—an entity, often a trusted 3rd-party, that issues the X.509 digital
certificates used to mutually verify the identities of organizations, servers or other enti-
ties connecting to one another over a public network.
CAC
Common Access Card—a United States Department of Defense (DoD) smartcard issued
as standard identification for active duty military personnel, reserve personnel, civilian
employees, and eligible contractor personnel.
CCITT
Comite Consultatif Internationale de Telegraphie et Telephonie, former name of the
ITU-T.
CLI
command-line interface—a user interface in which the user enters textual commands
on a single line on the monitor screen.
client
In client-server architecture, an application that relies on another, shared application
(server) to perform some of its functions, typically for an end-user device.
Client Refer to
Fortress Secure Client .
CRL
Certificate Revocation List—a list of the serial numbers of digital certificates that have
been revoked by their issuing CA and that therefore should not be relied upon.
Crypto Officer password
A FIPS-defined term—sometimes,
Crypto password —the a dministrator password in For-
tress devices operating in FIPS mode.
Data Link Layer Refer to
DLC .
dBi
decibels over isotropic—a unit of measure of RF antenna gain: the power emitted by an
antenna in its direction of strongest RF emission divided by the power that would be
transmitted by an isotropic antenna emitting the same total power.
dBm
decibels referenced to milliwatts—an absolute (non-relative) unit of power measure-
ment that indicates the ratio, in decibels (dB), of measured power referenced to one
milliwatt (mW)
Deployable Mesh Point Name of the Fortress ES520 model Mesh Point.
device authentication
In Fortress products, a means of controlling network access at the level of individual
devices, tracking them via their generated Device IDs and providing controls to explic-
itly allow and disallow them on the network; one of the factors in Fortress’s Multi-factor
Authentication™.
Device ID
In Fortress products, a 16-digit hexadecimal value generated for and unique to each
Fortress Mesh Point or MSP Secure Client device on the Fortress-secured network.
Device IDs are used for
device authentication and are neither modifiable nor transfer-
able.
DHCP
Dynamic Host Configuration Protocol—an Internet protocol describing a method for
flexibly assigning device IP addresses from a defined pool of available addresses as
each networked device comes online, through a client-server architecture. DHCP is an
alternative to a network of fixed IP addresses.
Diffie-Hellman key establishment
A protocol by which two parties with no prior knowledge of one another can agree upon
a shared secret key for symmetric key encryption of data over an insecure channel.
Also,
Diffie-Hellman-Merkle key establishment ; exponential key exchange .
DLC
Data Link Control—the second lowest network layer in the OSI Model, also referred to
as the
Data Link Layer , OSI Layer 2 or simply Layer 2 . The DLC layer contains two sub-
layers: the MAC and LLC layers.
DMZ
Demilitarized Zone—in IT, a computer (or subnet) located between the private LAN and
a public network, usually the Internet.
DNS
Domain Name System , Server or Service —a system or network service, defined in the
TCP/IP Internet Protocol Suite, that translates between textual domain and host names
and numerical IP addresses.