ZyXEL Communications USG FLEX H Series - Page 301

Chapter 19 Sandbox
USG FLEX H Series User’s Guide
301
The following table describes the labels in this screen.
Table 151 Security Service > Sandbox
LABEL DESCRIPTION
General
Enable Sandbox Select this option to turn on sandbox if you have a license and have activated it on the
Zyxel Device. Otherwise, deselect it.
Collect Statistics Enable to have the Zyxel Device collect sandbox statistics, such as the time, type and name
of the files scanned. The statistics collected will display in Security Statistics > Sandbox. All of
the statistics are erased if you restart the Zyxel Device or click Flush Data in Security Statistics
> Sandbox.
Action For Malicious
File
Specify whether the Zyxel Device deletes (destroy) or forwards (allow) malicious files.
Malicious files are files given a high score for malware characteristics by the cloud. You can
check the medium score for malware characteristics given by the cloud in the logs.
Log For Malicious File These are the log options for malicious files:
no: Do not create a log when a malicious file is detected.
log: Create a log on the Zyxel Device when a malicious file is detected.
log alert: An alert is an emailed log. Select this option to have the Zyxel Device send an alert
when a malicious file is detected.
Action For Suspicious
File
Specify whether the Zyxel Device deletes (destroy) or forwards (allow) suspicious files.
Suspicious files are files given a medium score for malware characteristics by the cloud. You
can check the medium score for malware characteristics given by the cloud in the logs.
Log For Suspicious
File
These are the log options for suspicious files:
no: Do not create a log when a suspicious file is detected.
log: Create a log on the Zyxel Device when a suspicious file is detected.
log alert: An alert is an emailed log for more serious events that may need more immediate
attention. Select this option to have the Zyxel Device send an alert when a suspicious file is
detected.
File Submission
Options
Specify the type of files to be sent for sandbox inspection.
• Executables (exe): An executable file is a file that contains a program or application
which your computer can run
• MS Office Document (doc...): This category includes Microsoft Word files, Microsoft Excel
files and Microsoft PowerPoint files. MS Office Document are files that are created using
software developed by Microsoft.
• Macromedia Flash Data (swf): A flash file (.swf) is a file that contains animations,
multimedia elements or games. A flash file is often embedded into a web page.
• PDF Document (pdf): A Portable Document Format (PDF) file is a file that maintains the
presentation and formatting of documents across different platform and devices.
• RTF Document (rtf): A Rich Text Format (RTF) file is a file that allows you to create text with
different formats, such as bold or italics.
• ZIP Archive (zip): A zip file is a file used to compress multiple files together into a single
file. A zip file can reduce the overall size of a collection of files.
Apply Click Apply to save your changes.
Reset Click Reset to return the screen to its last-saved settings.