VPN Visibility
Definition
The records observable at a specific tunnel endpoint or sensor. Encryption, logging configuration and retention determine what can be assessed.
Related terms
- IDS vs IPS
- Detection and prevention functions: passive sensors commonly alert on copies, while inline prevention can block. Host-based and active-response variants also exist.
- IPSec AH and ESP
- IPsec protocols with different protection: AH supplies authentication/integrity for covered fields without confidentiality, while ESP supports configured payload protection.
- Kerberos
- A ticket-based authentication protocol using a key distribution centre. It is distinct from LDAP directory access.
- NGFW
- A product category combining functions such as filtering, application analysis and detection. Enabled features and visibility must be verified.
- Stateful Firewall
- A filtering control that maintains relevant flow state. Its state model, policy and timeouts determine what a log means.