Chapter 28 Anti-Virus

28.6 Anti-Virus Black List Add/Edit

From the Anti-X> Anti-Virus > Setting screen, click a black list Add icon or Edit icon to display the following screen. Use this screen to create an anti-virus black list entry for a file pattern that should cause the ZyWALL to log and delete a file.

Figure 318 Anti-X > Anti-Virus > Setting > Black List Add

The following table describes the labels in this screen.

Table 125

Anti-X > Anti-Virus > Setting > Black List Add

LABEL

 

DESCRIPTION

Enable

 

Select this option to have the ZyWALL apply this black list entry when using the

 

 

black list.

 

 

 

File Pattern

 

Specify a pattern to identify the names of files that the ZyWALL should log and

 

 

delete.

 

 

Use up to 80 characters. Alphanumeric characters, underscores (_), dashes (-),

 

 

question marks (?) and asterisks (*) are allowed.

 

 

A question mark (?) lets a single character in the file name vary. For example, use

 

 

“a?.zip” (without the quotation marks) to specify aa.zip, ab.zip and so on.

 

 

Wildcards (*) let multiple files match the pattern. For example, use “*a.zip” (without

 

 

the quotation marks) to specify any file that ends with “a.zip”. A file named

 

 

“testa.zip would match. There could be any number (of any type) of characters in

 

 

front of the “a.zip” at the end and the file name would still match. A file named

 

 

“test.zipa” for example would not match.

 

 

A * in the middle of a pattern has the ZyWALL check the beginning and end of the

 

 

file name and ignore the middle. For example, with “abc*.zip”, any file starting with

 

 

“abc” and ending in “.zip” matches, no matter how many characters are in

 

 

between.

 

 

The whole file name has to match if you do not use a question mark or asterisk.

 

 

If you do not use a wildcard, the ZyWALL checks up to the first 80 characters of a

 

 

file name.

 

 

 

OK

 

Click OK to save your changes.

 

 

 

Cancel

 

Click Cancel to exit this screen without saving your changes.

 

 

 

28.7 Signature Searching

Click Anti-X> Anti-Virus > Signature to display this screen. Use this screen to locate signatures and display details about them.

If Internet Explorer opens a warning screen about a script making Internet Explorer run slowly and the computer maybe becoming unresponsive, just click No to continue.

 

413

ZyWALL USG 300 User’s Guide