Chapter 37 IDP
ZyWALL/USG Series User’s Guide
658
37.3.1 Add / Edit Custom Signatures
Click the Add icon to create a new signature or click the Edit icon to edit an existing signature in
the screen as shown in Figure 454 on page 657.
A packet must match all items you configure in this screen before it matches the signature. The
more specific your signature (including packet contents), then the fewer false positives the
signature will trigger.
Try to write signatures that target a vulnerability, for example a certain type of traffic on certain
operating systems, instead of a specific exploit.
Customer
Signature Rule
Importing
Use this part of the screen to import custom signatures (previously saved to your
computer) to the ZyWALL/USG.
Note: The name of the complete custom signature file on the ZyWALL/USG is
‘custom.rules’. If you import a file named ‘custom.rules’, then all custom signatures
on the ZyWALL/USG are overwritten with the new file. If this is not your intention,
make sure that the files you import are not named ‘custom.rules’.
File Path Type the file path and name of the custom signature file you want to import in the text
box (or click Browse to find it on your computer) and then click Importing to transfer
the file to the ZyWALL/USG.
New signatures then display in the ZyWALL/USG IDP > Custom Signatures screen.
Table 253 Configuration > UTM Profile> IDP > Custom Signatures (continued)
LABEL DESCRIPTION
To Next Page
Loading...
