Professor Messers Security+ 4.4 Videos

security information event manager

also known as SIEM or SEM; allows us to combine log files from differnet devices; firewalls, servers. VPN.. etc

actionable report

information about status of information on our system; helps us figure out what else we can do with our system

security information and event management

also known as SIEM; combine log files to a central database

data loss prevention

also known as DLP; to look for & block data we dont want on our network

simple network management protocol

also known as SNMP; a protocol used for managing and monitoring network devices.

management information database

also known as MIB; metric that are being monitored

netflow

monitoring traffic flow and statistic relating to application use

vulnerability scanner

minimally invasive but can check if there is vulnerabilies

network based firewall

sits in line in network; makes choices if you are allowed or not to the network

next generation firewall

also known as; NGFW analyze traffic in firewall & specific application being used

web server firewall ruleset

our first rule normally in first box labeled “1” will allow traffic from “all” IP; it will then allow “any” port to connect; all traffic that wants to go to port 22 using TCP protocol; for action we “allow”