Chapter 39 Anti-Virus
ZyWALL USG Series User’s Guide
747
The following table describes the labels in this screen.
39.3.2 Anti-Virus Black/White List
Click Configuration > UTM Profile > Anti-Virus > Black/White List > White List to display the screen shown
next. Use the Black/White List screen to set up Anti-Virus black (blocked) and white (allowed) lists of virus
file patterns. You can set them if you are avoiding specific kinds of viruses or reducing false positives.
Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell
again to reverse the sort order.
Table 271 Configuration > UTM Profile > Anti-Virus > Black/White List > Black List (or White List) > Add
LABEL DESCRIPTION
Enable If this is a black list entry, select this option to have the Zyxel Device apply this entry when
using the black list.
If this is a white list entry, select this option to have the Zyxel Device apply this entry when
using the white list.
File Pattern For a black list entry, specify a pattern to identify the names of files that the Zyxel Device
should log and delete.
For a white list entry, specify a pattern to identify the names of files that the Zyxel Device
should not scan for viruses.
• Use up to 80 characters. Alphanumeric characters, underscores (
_), dashes (-), question
marks (?) and asterisks (*) are allowed.
• A question mark (?) lets a single character in the file name vary. For example, use
“a?.zip” (without the quotation marks) to specify aa.zip, ab.zip and so on.
• Wildcards (*) let multiple files match the pattern. For example, use “*a.zip” (without the
quotation marks) to specify any file that ends with “a.zip”. A file named “testa.zip would
match. There could be any number (of any type) of characters in front of the “a.zip” at
the end and the file name would still match. A file named “test.zipa” for example would
not match.
• A * in the middle of a pattern has the Zyxel Device check the beginning and end of the
file name and ignore the middle. For example, with “abc*.zip”, any file starting with
“abc” and ending in “.zip” matches, no matter how many characters are in between.
• The whole file name has to match if you do not use a question mark or asterisk.
• If you do not use a wildcard, the Zyxel Device checks up to the first 80 characters of a
file name.
Source Select a source address or address group for whom this policy applies. You can configure a
new one in the Object > Address > Add screen. Select any if the policy is effective for every
source.
Destination Select a destination address or address group for whom this policy applies. You can
configure a new one in the Object > Address > Add screen. Select any if the policy is
effective for every destination.
OK Click OK to save your changes.
Cancel Click Cancel to exit this screen without saving your changes.