ZyXEL Communications VPN Series - Anti-Virus White List

Chapter 38 Anti-Virus
ZyWALL/USG Series User’s Guide
676
The following table describes the labels in this screen.
38.3.2 Anti-Virus White List
Click Configuration > UTM Profile > Anti-Virus > Black/White List > White List to display
the screen shown next. Use the Black/White List screen to set up Anti-Virus black (blocked) and
white (allowed) lists of virus file patterns. Click a column’s heading cell to sort the table entries by
that column’s criteria. Click the heading cell again to reverse the sort order.
Table 259 Configuration > UTM Profile > Anti-Virus > Black/White List > Black List (or White List) >
Add
LABEL DESCRIPTION
Enable If this is a black list entry, select this option to have the ZyWALL/USG apply this entry
when using the black list.
If this is a white list entry, select this option to have the ZyWALL/USG apply this entry
when using the white list.
File Pattern For a black list entry, specify a pattern to identify the names of files that the ZyWALL/
USG should log and delete.
For a white list entry, specify a pattern to identify the names of files that the ZyWALL/
USG should not scan for viruses.
• Use up to 80 characters. Alphanumeric characters, underscores (
_), dashes (-),
question marks (?) and asterisks (*) are allowed.
• A question mark (?) lets a single character in the file name vary. For example, use
“a?.zip” (without the quotation marks) to specify aa.zip, ab.zip and so on.
• Wildcards (*) let multiple files match the pattern. For example, use “*a.zip”
(without the quotation marks) to specify any file that ends with “a.zip”. A file named
“testa.zip would match. There could be any number (of any type) of characters in
front of the “a.zip” at the end and the file name would still match. A file named
“test.zipa” for example would not match.
• A * in the middle of a pattern has the ZyWALL/USG check the beginning and end of
the file name and ignore the middle. For example, with “abc*.zip”, any file starting
with “abc” and ending in “.zip” matches, no matter how many characters are in
between.
• The whole file name has to match if you do not use a question mark or asterisk.
• If you do not use a wildcard, the ZyWALL/USG checks up to the first 80 characters
of a file name.
Source Select a source address or address group for whom this policy applies. You can
configure a new one in the Object > Address > Add screen. Select any if the policy is
effective for every source.
Destination Select a destination address or address group for whom this policy applies. You can
configure a new one in the Object > Address > Add screen. Select any if the policy is
effective for every destination.
OK Click OK to save your changes.
Cancel Click Cancel to exit this screen without saving your changes.