Glossary

Main page of many Barracuda Networks product interfaces, providing a summary of the system. Formerly known as the Status tab.

A facility used to house computer systems and associated components, such as telecommunications and storage systems.

Occurs when data or a data stream is stored in a location too short to hold its entire length. May occur automatically, such as when a long string is written to a smaller buffer, or deliberately, when only a portion of the data is wanted.

Document that summarizes the performance and other technical characteristics of a product, machine, component (e.g., an electronic component), material, a subsystem (e.g., a power supply) or software in sufficient detail to be used by a design engineer to integrate the component into a system.

Remote procedure call system that allows programmers to write distributed software without having to worry about the underlying network code.

A Distributed Denial of Service is a cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to users by temporarily or indefinitely disrupting services of a host connected to the Internet, using more than one, often thousands of, unique IP addresses.

An Internet hosting option where an organization leases an entire server, fully dedicated to their use. This is also an option in the public cloud. The price for a Dedicated Host varies by instance family, region, and payment option.

Amazon EC2 instance that runs on single-tenant hardware dedicated to a single customer.

An option you can purchase from a cloud vendor to guarantee that sufficient capacity will be available to launch Dedicated Instances into a virtual private cloud (VPC).

A physical or logical sub-network that contains and exposes an organization’s external-facing services to a larger and untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization’s local area network (LAN). An external network node has direct access only to equipment in the DMZ, rather than to any other part of the network.

A technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by systematically entering every word in the dictionary.

An option associated with a destination server that allows for increased outbound traffic throughput when performing sustained uploads, such as streamed audio or visual media.

An email authentication method designed to detect email spoofing. It enables an email recipient to check that an email claimed to have come from a specific domain was indeed authorized by the owner of that domain. This protocol attempts to prevent the use of forged sender addresses in emails, a technique often used in phishing and email spam. 

An email-validation system designed to detect and prevent email spoofing. DMARC helps to counter certain phishing and spam email exploits, such as using false sender addresses in email messages that appear to originate from legitimate organizations. It counters the illicit usage of the exact domain name in the From: field of email message headers. DMARC is built on top of SPF and DKIM. You must have both an SPF and a DKIM record published for the domain to set DMARC policies.

Distributed database that translates domain names, like www.example.com, into unique IP address.

A temporary database, maintained by a computer's operating system, that contains records of all recent visits and attempted visits to websites and other Internet domains.

Database record used to map a URL to an IP address.

Filtering mail traffic based on a DNS reputation database. Used by the Spam Filter service (blacklist, DNSBL).

Open-source software that automates the deployment of applications inside virtualized software containers.

A layered file system template that is the basis of a Docker container. Docker images can comprise specific operating systems or applications.

Email authentication method designed to detect email spoofing.

A  cyber-attack where the perpetrator seeks to make a computer or network resource unavailable to users by temporarily or indefinitely disrupting services of a host connected to the Internet. Denial of Service attacks are typically accomplished by flooding the target with superfluous requests in an attempt to overload systems and prevent legitimate requests from being fulfilled. See also Distributed Denial of Service or DDoS.

Term used in context with Traffic Intelligence (TI). Using dynamic path selection, the session is balanced depending on the amount of traffic.

Routing that adjusts automatically to network topology or traffic changes. Also called adaptive routing.

A fully managed Amazon NoSQL database service that provides fast and predictable performance with seamless scalability.

Forms a central part of AWS by allowing users to rent virtual computers on which to run their own computer applications.

Used by the AWS service CloudFront. Feature that offers content to end users via geographically closer locations to improve their experience.

Internet protocol for exchanging routing information between autonomous systems. 

A web service for deploying and managing applications in the AWS cloud without worrying about the infrastructure that runs those applications.

The ability to dynamically provision and deprovision computing and storage resources to stretch to the demands of peak usage, without the need to worry about capacity planning and engineering around uneven usage patterns.

A static public IP address that belongs to an AWS account. Can be associated with an instance to make it accessible from the Internet. The Elastic IP is natted/mapped by AWS to the private IP.

Email failover system that allows email communication to continue during mail server outage.

Encrypting email messages to prevent their content by being read by anyone other than the intended recipient.

To convert information or data into a cipher or code, especially to prevent unauthorized access. Antonym: unencrypt. 

Provides Barracuda Networks products with protection from the latest Internet threats. These updates are sent out hourly, or more frequently if needed, to ensure that appliances always have the latest and most comprehensive protection. Barracuda Energize Updates subscriptions must be purchased with any Barracuda Networks appliance. Includes basic support, firmware maintenance, security updates, and early release firmware.

The use of a master key and a data key to algorithmically protect data. The master key is used to encrypt and decrypt the data key and the data key is used to encrypt and decrypt the data itself.

Local area network technology that uses special twisted pair or fiber optical cables. As per the OSI model, Ethernet provides services up to and including the data link layer.

Contract between the Barracuda and the purchaser, establishing the purchaser's right to use Barracuda software.

Bypassing an information security device in order to deliver an exploit, attack, or other form of malware to a target network or system, without detection.

The use of software, data, or commands to 'exploit' a weakness in a computer system or program to carry out some form of malicious intent, such as a denial-of-service attack, Trojan horses, worms, or viruses.

Lists of IP addresses from which potential spam originates.

A result that indicates a given condition is present, when it is not.

Model version of a Barracuda Networks product.

A Denial of Service (DoS) attack that is designed to bring a network or service down by flooding it with large amounts of traffic.

AWS service that enables you to capture information about the IP traffic going to and from network interfaces in a VPC.

Techniques of examining digital media with the aim of identifying, preserving, recovering, analyzing, and presenting facts and opinions about the digital information.

The Fully Qualified Domain Name includes host name, as well as all enclosing domains, and is often distinguished by the use of a terminating dot: (host.subdomain.domain.).

The front end is responsible for collecting input in various forms from the user.

The front-end server is an extension of the back-end server and is designed to provide scalability.

Allows the proxy to control FTP traffic. When a client uploads or downloads files, the proxy identifies the traffic as FTP, allowing the appliance to control file transfers using TCP optimization and caching.