ZyXEL Communications 3.1 21.2.4Signature Search Anti-virusCommand, 21.2.3.1 White and Black Lists Example

Chapter 21 Anti-Virus

Table 94 Commands for Anti-virus White and Black Lists (continued)

COMMAND	DESCRIPTION
[no] anti-virus black-list file-pattern	Adds or removes a black list file pattern. Turns a file pattern on or off.
av_file_pattern {activatedeactivate}
anti-virus black-list replace	Replaces the specified black list file pattern with a new file pattern.
old_av_file_pattern new_av_file_pattern
{activatedeactivate}

21.2.3.1 White and Black Lists Example

This example shows how to enable the white list and configure an active white list entry for files with a .exe extension. It also enables the black list and configure an inactive black list entry for files with a .exe extension.

Router(config)# anti-virus white-list activate Router(config)# anti-virus white-list file-pattern Router(config)# anti-virus white-list file-pattern *.exe activate Router(config)# anti-virus black-list activate

Router(config)# anti-virus black-list file-pattern *.exe deactivate Router(config)# show anti-virus white-list status

anti-virus white-list status: yes Router(config)# show anti-virus white-list No. Status

File-Pattern

===========================================================================

1yes

*.exe

Router(config)# show anti-virus black-list status anti-virus black-list status: yes Router(config)# show anti-virus black-list

No. Status File-Pattern

===========================================================================

1no

*.exe

21.2.4Signature Search Anti-virus Command

The following table describes the command for searching for signatures. You must use the configure terminal command to enter the configuration mode before you can use this command.

Table 95 Command for Anti-virus Signature Search

COMMAND	DESCRIPTION
anti-virus search signature {all	Search for signatures by their ID, name, severity, or category.
category category id id name name	all: displays all signatures.
severity severity [{from id to id}]	all: displays all signatures.
	category: select whether you want to see virus signatures or spyware
	signatures.
	id: type the ID or part of the ID of the signature you want to find.
	name: type the name or part of the name of the signature(s) you want to
	find. This search is not case-sensitive.
	severity: type the severity level of the signatures you want to find (high,
	medium, or low).

	177
ZyWALL (ZLD) CLI Reference Guide	177