ZyXEL Communications ATP800 - Anti-Malware Signature Searching

Chapter 28 Anti-Malware
ZyWALL ATP Series User’s Guide
530
The following table describes the labels in this screen.
28.3 Anti-Malware Signature Searching
Click Configuration > Security Service > Anti-Malware > Signature to display this screen. Use this screen
to locate signatures and display details about them.
If Internet Explorer opens a warning screen about a script making Internet Explorer run slowly and the
computer maybe becoming unresponsive, just click No to continue. Click a column’s heading cell to
sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order.
Figure 352 Configuration > Security Service > Anti-Malware > Signature
Table 213 Configuration > Security Service > Anti-Malware > Black/White List > Add
LABEL DESCRIPTION
Enable If this is a black list entry, select this option to have the Zyxel Device apply this entry when
using the black list.
If this is a white list entry, select this option to have the Zyxel Device apply this entry when
using the white list.
File Pattern For a black list entry, specify a pattern to identify the names of files that the Zyxel Device
should log and then destroy.
For a white list entry, specify a pattern to identify the names of files that the Zyxel Device
should not scan for malware.
• Use up to 80 characters. Alphanumeric characters, underscores (
_), dashes (-), question
marks (?) and asterisks (*) are allowed.
• A question mark (?) lets a single character in the file name vary. For example, use
“a?.zip” (without the quotation marks) to specify aa.zip, ab.zip and so on.
• Wildcards (*) let multiple files match the pattern. For example, use “*a.zip” (without the
quotation marks) to specify any file that ends with “a.zip”. A file named “testa.zip would
match. There could be any number (of any type) of characters in front of the “a.zip” at
the end and the file name would still match. A file named “test.zipa” for example would
not match.
• A * in the middle of a pattern has the Zyxel Device check the beginning and end of the
file name and ignore the middle. For example, with “abc*.zip”, any file starting with
“abc” and ending in “.zip” matches, no matter how many characters are in between.
• The whole file name has to match if you do not use a question mark or asterisk.
• If you do not use a wildcard, the Zyxel Device checks up to the first 80 characters of a
file name.
OK Click OK to save your changes.
Cancel Click Cancel to exit this screen without saving your changes.