CASB
Cloud Access Security Broker
A security layer between users and cloud apps that enforces policies and gives visibility into cloud usage.
Network & Cloud Security
Glossary category
Network & Cloud Security
Secure access for users, branches and cloud apps, from Zero Trust to SASE.
20 terms
Terms in Network & Cloud Security
DNS filtering
Blocking access to malicious or unwanted websites at the domain name lookup stage.
Related: SWG, URL filtering, Phishing
Network & Cloud Security
Firewall
A security control that allows or blocks network traffic based on defined rules.
Related: NGFW, FWaaS, Network security
Network & Cloud Security
FWaaS
Firewall as a Service
Firewall capabilities delivered from the cloud instead of a hardware box at each site.
Network & Cloud Security
IDS / IPS
Intrusion Detection / Prevention System
Systems that monitor network traffic for attacks; an IDS raises alerts, an IPS also blocks the traffic.
Related: NGFW, NDR, Network security
Network & Cloud Security
Microsegmentation
Dividing a network into small isolated zones so an attacker who gets in can't move freely.
Related: Zero Trust, Lateral movement, Network security
Network & Cloud Security
NAC
Network Access Control
Controls which devices can connect to a network, based on identity and security checks.
Related: ZTNA, Device compliance, Zero Trust
Network & Cloud Security
Network security
Protecting a network and the data travelling over it from unauthorised access, misuse and attacks.
Related: NGFW, IDS / IPS, ZTNA
Network & Cloud Security
NGFW
Next-Generation Firewall
A firewall that adds application awareness, intrusion prevention and threat intelligence to traditional traffic filtering.
Related: FWaaS, IDS / IPS, Network security
Network & Cloud Security
Remote browser isolation
RBI
Runs web browsing in an isolated cloud container so malicious code never reaches the user's device.
Related: SWG, Phishing, Zero Trust
Network & Cloud Security
SASE
Secure Access Service Edge
A cloud-delivered framework that combines networking (SD-WAN) and security services such as ZTNA, SWG and CASB into one service.
Network & Cloud Security
SD-WAN
Software-Defined Wide Area Network
Software that manages wide-area network traffic across links such as broadband, MPLS and 4G/5G to connect branches efficiently.
Related: SASE, FWaaS, Network security
Network & Cloud Security
SDP
Software-Defined Perimeter
A security approach that hides applications from the internet and only reveals them to verified users.
Related: ZTNA, Zero Trust, VPN
Network & Cloud Security
SSE
Security Service Edge
The security part of SASE, combining SWG, CASB and ZTNA delivered from the cloud.
Network & Cloud Security
SSL inspection
Decrypting and inspecting encrypted web traffic to find hidden threats, then re-encrypting it.
Related: SWG, NGFW, Encryption
Network & Cloud Security
SWG
Secure Web Gateway
A security service that filters web traffic to block malicious sites, downloads and policy violations.
Related: URL filtering, DNS filtering, CASB
Network & Cloud Security
URL filtering
Allowing or blocking web pages based on their address or category.
Related: SWG, DNS filtering
Network & Cloud Security
VPN
Virtual Private Network
An encrypted tunnel that connects a user or site to a private network over the internet.
Network & Cloud Security
Zero Trust
A security model that never trusts any user or device by default and verifies every access request.
Related: ZTNA, Least privilege, Microsegmentation
Network & Cloud Security
ZTNA
Zero Trust Network Access
Gives users access to specific applications only after verifying identity and device every time, instead of opening the whole network like a VPN.
Related: Zero Trust, VPN, SASE
Network & Cloud Security
How NetNXT covers network & cloud security
These terms describe the work our Zero Trust service does for clients. The service page sets out what it includes.