Chapter 28 Anti-Virus

Figure 372 Anti-X > Anti-Virus > General

The following table describes the labels in this screen.

Table 145 Anti-X > Anti-Virus > General

LABEL

DESCRIPTION

General Settings

Click Advanced to display more settings. Click Basic to display fewer settings.

 

 

Enable Anti-Virus

Select this check box to check traffic for viruses and spyware. The following table

and Anti-Spyware

lists policies that define which traffic the ZyWALL scans and the action it takes

 

upon finding a virus.

 

 

Scan EICAR

Select this option to have the ZyWALL check for the EICAR test file and treat it in

 

the same way as a real virus file. The EICAR test file is a standardized test file for

 

signature based anti-virus scanners. When the virus scanner detects the EICAR

 

file, it responds in the same way as if it found a real virus. Besides straightforward

 

detection, the EICAR file can also be compressed to test whether the anti-virus

 

software can detect it in a compressed file. The test string consists of the following

 

human-readable ASCII characters.

 

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-

 

FILE!$H+H*

 

 

Priority

This is the position of an anti-virus policy in the list. The ordering of your anti-virus

 

policies is important as the ZyWALL applies them in sequence. Once traffic

 

matches an anti-virus policy, the ZyWALL applies that policy and does not check

 

the traffic against any more policies.

 

 

From

The anti-virus policy has the ZyWALL scan traffic coming from this zone and going

 

to the To zone.

 

 

To

The anti-virus policy has the ZyWALL scan traffic going to this zone from the From

 

zone.

 

 

Protocol

These are the protocols of traffic to scan for viruses.

 

FTP applies to traffic using the TCP port number specified for FTP in the ALG

 

screen.

 

HTTP applies to traffic using TCP ports 80, 8080 and 3128.

 

SMTP applies to traffic using TCP port 25.

 

POP3 applies to traffic using TCP port 110.

 

IMAP4 applies to traffic using TCP port 143.

 

 

472

 

ZyWALL USG 100/200 Series User’s Guide