FireMon Glossary

Network Security Glossary

Clear definitions of the firewall, network security policy, and compliance terms security teams use every day.

A

API Security (Application Programming Interface Security)Access Control Anomaly Detection Any-Any Rules Application Connectivity Asset Inventory Attack Surface Attack Surface Management (ASM)Attack Vector Audit Trail

B

Business Continuity Planning (BCP)Business Impact Analysis (BIA)

C

CIS Controls CMMC Compliance (Cybersecurity Maturity Model Certification)Cloud Access Security Broker (CASB)Cloud Detection and Response (CDR)Cloud Firewall Cloud Migration Security Cloud Security Posture Management (CSPM)Compliance Audit Compliance Evidence Compliance Framework Configuration Drift Configuration Management Database (CMDB)Container Security Continuous Compliance Critical Infrastructure Protection (CIP)Cyber Resilience Cyber Threat Hunting

D

Data Classification Data Collector Data Governance Data Loss Prevention (DLP)Default Deny Defense in Depth Demilitarized Zone (DMZ)DevSecOps Device Pack Disaster Recovery Planning (DRP)Domains Duplicate Firewall Rules

E

East-West Traffic Endpoint Security Enterprise Risk Management (ERM)Exposure Analysis

G

GDPR Compliance (General Data Protection Regulation Compliance)Guardrails

H

HIPAA Security Rule Hybrid Cloud Security

I

ISO 27001 Identity and Access Management (IAM)Implicit Deny Incident Response (IR)Infrastructure as Code (IaC) Security Ingress and Egress Filtering Insider Threat

J

Just-in-Time Access (JIT)

L

Lateral Movement Least Privilege Principle

M

Microsegmentation Model Context Protocol (MCP)Multi-Cloud Security Multi-Factor Authentication (MFA)Multi-Vendor Firewall Management

N

NIST Cybersecurity Framework (CSF)Network Access Control (NAC)Network Access Control List (ACL)Network Address Translation (NAT)Network Path Analysis Network Reachability Network Security Architecture Network Security Audit Network Security Monitoring (NSM)Network Security Policy Control Network Security Policy Management (NSPM)Network Segmentation Network Visibility Next-Generation Firewall (NGFW)

O

Operational Technology (OT) Security Overly Permissive Firewall Rules

P

PCI DSS Compliance (Payment Card Industry Data Security Standard Compliance)Packet Filtering Patch Management Penetration Testing Policy Control Plane for Network Security Policy Enforcement Policy Enforcement Point (PEP)Policy Exceptions Policy Governance Policy Planner Workbench Policy as Code (PaC)Post-Change Validation Pre-Change Risk Assessment Privileged Access Management (PAM)

R

Redundant Firewall Rules Risk Assessment Risk Remediation Risk-Based Vulnerability Management (RBVM)Role-Based Access Control (RBAC)Rule Order Rule Recertification

S

SIQL (Security Intelligence Query Language)SOC 2 Compliance (System and Organization Controls 2)Security Baseline Security Control Security Event Management (SEM)Security Groups Security Hardening Security Information and Event Management (SIEM)Security Operations Center (SOC)Security Orchestration, Automation, and Response (SOAR)Security Policy Security Posture Segmentation Policy Shadow IT Shadowed Rules Stateful Inspection Stateless Firewall

T

Temporary Firewall Access Threat Intelligence Threat Modeling

U

Unused and Redundant Firewall Rules

V

Virtual Firewall Vulnerability Management

W

What-If Analysis

Z

Zero Trust Architecture (ZTA)Zero Trust Network Access (ZTNA)Zero Trust Security

Network Security Glossary | FireMon