Glossary

Network, protocol, security and product terms that appear in TR7 screens, logs and documentation. Each entry explains what the term is and where it is used in TR7.

01Network FundamentalsIP, ports, TCP/UDP, NAT, VLAN, routing and interface terms

• What is an IP address; where are IP addresses defined in TR7?GEN-01-001
• What is the difference between IPv4 and IPv6?GEN-01-002
• What is the difference between a private IP and a public IP?GEN-01-003
• What is a subnet; why does TR7 require the same subnet?GEN-01-004
• What is CIDR notation (e.g. 10.0.0.0/24)?GEN-01-005
• What is a port; where are ports set in TR7?GEN-01-006
• What is TCP; where is it used in TR7?GEN-01-007
• What is UDP; how does it differ from TCP?GEN-01-008
• What are ICMP and ping; where are they used in TR7?GEN-01-009
• What do the L2, L3, L4 and L7 layers mean; why do they appear so often on TR7 screens?GEN-01-010
• What is NAT; which types exist in TR7?GEN-01-011
• What is a MAC address; where does it appear in TR7?GEN-01-012
• What is a Default Gateway?GEN-01-013
• What is a static route?GEN-01-014
• What is a VLAN; what is a VLAN interface for in TR7?GEN-01-015
• What is an interface; what is the difference between a physical (ETH) interface and a virtual interface?GEN-01-016
• What is the difference between the Up, No Link and Down states of an interface?GEN-01-017
• What is the difference between bandwidth and packets/s?GEN-01-018
• What do RX and TX mean?GEN-01-019
• What do TCP connection states (such as ESTABLISHED and TIME_WAIT) mean?GEN-01-020
• What is DNAT?GEN-01-021
• What is ARP; how does it relate to VIP failover and the Spoofing setting in TR7?GEN-01-022
• What is an IP conflict; how does TR7 check for it?GEN-01-023
• What is the difference between static routing and dynamic routing?GEN-01-024
• What is the difference between unicast, multicast and broadcast?GEN-01-025
• What is MTU; when should I change it in TR7?GEN-01-026
• What is the difference between Bond and LACP?GEN-01-027
• What is a bridge interface; why is STP important?GEN-01-028
• What is the difference between interface errors and drops?GEN-01-029
• What is VXLAN; how does it differ from VLAN?GEN-01-030
• In what order do I configure networking when connecting TR7 to a new network (route table, interface, IP, route, firewall)?GEN-01-031

02High AvailabilityHA, failover, VRRP and cluster terms

• What is high availability (HA); at which layers is it provided in TR7?GEN-02-001
• What is failover; when does it happen in TR7?GEN-02-002
• What is the difference between an active-passive and an active-active cluster?GEN-02-003
• What is VRRP; how does it provide VIP failover in TR7?GEN-02-004
• What is a heartbeat; which links serve this role in a TR7 cluster?GEN-02-005
• What is Gateway Monitoring; how does it affect VIP failover?GEN-02-006

03HTTP and WebHTTP versions, methods, status codes, headers and cookies

• What is the difference between HTTP and HTTPS?GEN-03-001
• What are HTTP methods (GET, POST, PUT, DELETE…)?GEN-03-002
• What is an HTTP status code; what do the 2xx, 3xx, 4xx and 5xx classes describe?GEN-03-003
• What is an HTTP Header?GEN-03-004
• What is the Host Header?GEN-03-005
• What is the User-Agent header?GEN-03-006
• What is a cookie; what is the difference between the Cookie and Set-Cookie headers?GEN-03-007
• What is HTTP compression?GEN-03-008
• What are the parts of a URL (scheme, host, path, query string)?GEN-03-009
• What is the difference between HTTP/1.1 and HTTP/2?GEN-03-010
• What are HTTP/3 and QUIC?GEN-03-011
• What is the difference between the 301, 302, 307 and 308 redirect codes?GEN-03-012
• What is the Accept-Language header?GEN-03-013
• What are the Referer header and Referrer-Policy?GEN-03-014
• What are the Secure, HttpOnly and SameSite cookie attributes?GEN-03-015
• What is HTTP keep-alive?GEN-03-016
• What is WebSocket?GEN-03-017
• What is the difference between GZIP and DEFLATE?GEN-03-018
• What is a MIME type (Content-Type)?GEN-03-019
• What is HTTP caching; what does the Cache-Control header do?GEN-03-020
• What is CORS; what is a preflight (OPTIONS) request for?GEN-03-021
• What are HTTP security headers?GEN-03-022
• What is Content-Security-Policy (CSP)?GEN-03-023
• What is X-Frame-Options?GEN-03-024
• What is mixed content?GEN-03-025
• What is gRPC?GEN-03-026
• What is the difference between a multipart form and a URL-encoded form?GEN-03-027
• What is X-Content-Type-Options: nosniff?GEN-03-028
• What is URL percent-encoding?GEN-03-029
• What is 421 Misdirected Request?GEN-03-030

04TLS and CertificatesTLS versions, handshake, SNI, certificate types and ACME

• What is the difference between SSL and TLS?GEN-04-001
• What is an SSL/TLS certificate?GEN-04-002
• What is a Private Key?GEN-04-003
• What is a CA (Certificate Authority)?GEN-04-004
• What is a wildcard certificate?GEN-04-005
• What is the difference between the TLS versions (TLS 1.0, 1.1, 1.2, 1.3)?GEN-04-006
• What is the TLS handshake?GEN-04-007
• What is a cipher suite?GEN-04-008
• What is SNI (Server Name Indication)?GEN-04-009
• What is HSTS?GEN-04-010
• What is mTLS?GEN-04-011
• What is the difference between RSA and ECDSA keys?GEN-04-012
• What is a certificate chain?GEN-04-013
• What is the difference between a root CA and an intermediate CA?GEN-04-014
• What is a self-signed certificate?GEN-04-015
• What is a CSR (Certificate Signing Request)?GEN-04-016
• What are the CN and SAN fields in a certificate?GEN-04-017
• What is the difference between the PEM and PFX certificate formats?GEN-04-018
• What is a certificate fingerprint?GEN-04-019
• What is PKI (Public Key Infrastructure)?GEN-04-020
• What are the ACME protocol and Let's Encrypt?GEN-04-021
• What are Perfect Forward Secrecy (PFS) and ECDHE?GEN-04-022
• What is Post-quantum Key Exchange?GEN-04-023
• What is ALPN?GEN-04-024
• What is TLS session resumption?GEN-04-025
• What are OCSP and OCSP Stapling?GEN-04-026
• What is certificate revocation?GEN-04-027
• What is a Trust Anchor?GEN-04-028
• What is Extended Key Usage (EKU)?GEN-04-029
• What is AIA (Authority Information Access)?GEN-04-030
• What is EAB (External Account Binding) in ACME?GEN-04-031
• What is the difference between renewing a certificate and rekeying it?GEN-04-032
• What is the difference between STARTTLS and implicit TLS (SMTPS, LDAPS)?GEN-04-033

05DNSRecord types, zones, TTL, zone transfer and DNSSEC

• What is DNS; where is it used in TR7?GEN-05-001
• What is a DNS zone; how does it relate to a domain and a DNS record?GEN-05-002
• What is the difference between an A record and an AAAA record?GEN-05-003
• What is a CNAME record?GEN-05-004
• What is TTL; on which TR7 screens does it appear, and with what meaning?GEN-05-005
• What is the difference between an authoritative DNS server and a recursive resolver?GEN-05-006
• What is an MX record?GEN-05-007
• What is an NS record?GEN-05-008
• What is an SOA record; what do its fields mean?GEN-05-009
• What is a TXT record; how does it differ from the SPF record type?GEN-05-010
• What is an SRV record?GEN-05-011
• What are the PTR record and reverse DNS?GEN-05-012
• What is a CAA record; why does it matter when obtaining certificates with ACME?GEN-05-013
• What is a wildcard DNS record?GEN-05-014
• What do the DNS response codes (NOERROR, NXDOMAIN, SERVFAIL, REFUSED) mean?GEN-05-015
• What is a Zone Transfer (AXFR)?GEN-05-016
• What are master and slave DNS servers?GEN-05-017
• What is DNSSEC?GEN-05-018
• What is DNS NOTIFY?GEN-05-019
• What is a DS record; why is it submitted to the registrar in DNSSEC?GEN-05-020
• What are DNSKEY, RRSIG and NSEC records?GEN-05-021
• What is TSIG?GEN-05-022

06Authentication and AccessLDAP, RADIUS, SAML, OAuth/OIDC, MFA and session terms

• What is the difference between authentication and authorization?GEN-06-001
• What is LDAP; where is it used in TR7?GEN-06-002
• What is Active Directory; how does it relate to LDAP?GEN-06-003
• What is RADIUS; where is it used in TR7?GEN-06-004
• What is SAML 2.0?GEN-06-005
• What is the difference between an IdP (Identity Provider) and an SP (Service Provider)?GEN-06-006
• What is SSO (Single Sign-On)?GEN-06-007
• What is OAuth 2.0?GEN-06-008
• What is OpenID Connect (OIDC)?GEN-06-009
• What is the difference between MFA and 2FA?GEN-06-010
• What is an OTP (One-Time Password)?GEN-06-011
• What is TOTP?GEN-06-012
• What is a session; in which senses is it used in TR7?GEN-06-013
• What is RBAC (Role-Based Access Control); how is it applied in TR7?GEN-06-014
• What is the least privilege principle; how is it met in TR7 user management?GEN-06-015
• What is the difference between LDAP and LDAPS?GEN-06-016
• What are a DN (Distinguished Name) and a Base DN in LDAP?GEN-06-017
• What is an LDAP search filter; how is it read?GEN-06-018
• What is the shared secret in RADIUS and TACACS+?GEN-06-019
• What is TACACS+; how does it differ from RADIUS?GEN-06-020
• What is AAA (Authentication, Authorization, Accounting); what is an accounting record for?GEN-06-021
• What is a SAML assertion?GEN-06-022
• What is SAML metadata?GEN-06-023
• What is the difference between an access token and an ID token?GEN-06-024
• What are the client ID and client secret?GEN-06-025
• What is an OAuth scope?GEN-06-026
• What is a JWT (JSON Web Token); where is it used in TR7?GEN-06-027
• What is a Bearer Token?GEN-06-028
• What is a RADIUS attribute?GEN-06-029
• What is identity federation?GEN-06-030
• What is an issuer; what is the OIDC discovery document (.well-known/openid-configuration) for?GEN-06-031
• What is a claim; how does it differ from a SAML attribute?GEN-06-032

07Security and Attack TypesDDoS, bots, IP reputation, OWASP, CWE and attack types

• What is a DDoS attack; at which layers does TR7 provide DDoS protection?GEN-07-001
• What is the difference between L4 DDoS Protection and L7 DDoS Protection?GEN-07-002
• What is a bot; how is the difference between a good bot and a bad bot handled in TR7?GEN-07-003
• What is a CAPTCHA; in which protections is it used in TR7?GEN-07-004
• What is rate limiting; at which layers is it applied in TR7?GEN-07-005
• What is a brute-force attack; how does TR7 protect the management interface and applications against it?GEN-07-006
• What is IP Reputation; where does TR7 use IP Reputation data?GEN-07-007
• What is geolocation data; where does TR7 perform country-based control?GEN-07-008
• What are OWASP and the OWASP Top 10; where do they appear in the TR7 WAF?GEN-07-009
• What is SQL Injection?GEN-07-010
• What is Cross-Site Scripting (XSS)?GEN-07-011
• What is a botnet; how does TR7 detect a distributed attack originating from a botnet?GEN-07-012
• What is a SYN Flood attack; which rules does TR7 apply against it?GEN-07-013
• What is a UDP Flood; why does TR7 apply a separate flood limit to DNS requests?GEN-07-014
• What is a Reflection & Amplification attack; how does the TR7 device protect against this attack?GEN-07-015
• What is a Port Scan; how does TR7 detect a source performing a port scan?GEN-07-016
• What is a bot score; what do the Clean, Suspicious, Bot and Bad Bot classes mean?GEN-07-017
• What is a Verified Bot; how does TR7 treat verified search engine crawlers?GEN-07-018
• What is Waiting Room; how does it differ from an attack enforcement?GEN-07-019
• What is Quarantine; how does it differ from blocking and where is it used in TR7?GEN-07-020
• What is the difference between the Standard, Tarpit and Silent Drop blocking types?GEN-07-021
• What is an ASN; where do I see and use ASN information in TR7?GEN-07-022
• What is Network Type; how does it differ from IP Reputation?GEN-07-023
• What is a Tor exit node; how does TR7 recognize Tor traffic?GEN-07-024
• What is an open proxy; what does TR7 do by default with addresses in this category?GEN-07-025
• What is the VPN IP category; why doesn't TR7 block VPN addresses by default?GEN-07-026
• What is the difference between the OWASP Top 10 (Web) and the OWASP API Top 10?GEN-07-027
• What is CWE; why does it appear in TR7 WAF logs and reports?GEN-07-028
• What is MITRE ATT&CK; what do the MITRE ATT&CK and MITRE Post-Exploit fields in TR7 show?GEN-07-029
• What is a zero-day attack?GEN-07-030
• What is a Directory / Path Traversal attack?GEN-07-031
• What are LFI and RFI (Local / Remote File Inclusion) attacks?GEN-07-032
• What is OS Command Injection?GEN-07-033
• What is SSRF (Server-Side Request Forgery)?GEN-07-034
• What is Threat State; what do the bands from No Attack to Active Attack describe?GEN-07-035
• What are SYN Cookies; when do they come into play in TR7?GEN-07-036
• What is a Smurf attack; what do the Smurf rules in TR7 limit?GEN-07-037
• What is spoofing; what do the Spoofing, LAND / Self-Spoof and Martians settings in TR7 catch?GEN-07-038
• What are Null Flood and Christmas Tree Scan; why does TR7 block these packets without false positive risk?GEN-07-039
• What is a TLS fingerprint (JA3 / JA4); how does TR7 use it in bot detection?GEN-07-040
• What is CAPEC; how does it differ from CWE?GEN-07-041
• What is an XXE (XML External Entity) attack?GEN-07-042
• What is HTTP Request Smuggling?GEN-07-043
• What is LLM prompt injection?GEN-07-044
• What is Application DoS; how does it differ from volumetric DDoS?GEN-07-045

08Monitoring and IntegrationSNMP, Syslog, CEF, SIEM, NTP and API terms

• What is SNMP; for what purposes is it used in TR7?GEN-08-001
• What is Syslog; how are TR7 logs forwarded with Syslog?GEN-08-002
• What is a SIEM; what does sending TR7 logs to a SIEM provide?GEN-08-003
• What is NTP; why is time synchronization important in TR7?GEN-08-004
• What is SMTP; with which settings does TR7 send e-mail notifications?GEN-08-005
• What is an audit log; where are administrator actions recorded in TR7?GEN-08-006
• What is Notification Management; how do the notification profile, Contact Groups and channels come together?GEN-08-007
• What is the difference between SNMP Trap and the SNMP agent?GEN-08-008
• What is an SNMP community?GEN-08-009
• What is the difference between SNMP v1, v2c and v3?GEN-08-010
• What is the difference between the RFC 3164 (BSD) and RFC 5424 Syslog formats?GEN-08-011
• What is CEF (Common Event Format); which TR7 logs can be sent in CEF format?GEN-08-012
• What is the difference between the JSON, CEF and Plain Text message formats for log forwarding?GEN-08-013
• What is the difference between the Apache Combined and Apache VHost log formats?GEN-08-014
• What is Prometheus; how are TR7 metrics exposed to Prometheus?GEN-08-015
• What is JSONata; where is it used in TR7?GEN-08-016
• What is a REST API; what does it offer for managing TR7 programmatically?GEN-08-017
• What is the difference between Log Forwarding and File Forwarding?GEN-08-018
• What is stratum in NTP; why is it shown in the TR7 Time Info row?GEN-08-019
• What is IPFIX; which data does TR7 send with IPFIX?GEN-08-020

09TR7 Product and Interface ConceptsProducts, interface sections, WEB-CLI and management access

• Which products make up TR7; what do ADC, WAAP, AAM and GTM cover?GEN-09-001
• What is the Left Monitor Panel; which objects does it let me monitor?GEN-09-002
• What is the Configuration Menu; how does it differ from the Left Monitor Panel?GEN-09-003
• What is the Header Bar; how do I set up my own layout?GEN-09-004
• What is the Search Bar; what can I search for?GEN-09-005
• What is Home & Dashboard; how does it differ from a vService's own Dashboard?GEN-09-006
• What is WEB-CLI; which command branches does it offer?GEN-09-007
• What is the difference between the Smart Advisor and Automatic learning modes?GEN-09-008
• What is Management Access; with which settings does TR7 protect management access?GEN-09-009
• Where do I change the interface language, theme, font and size for my own account?GEN-09-010