ZyXEL Communications ZyWALL 310 - 40.3 URL Threat Filter Commands

Chapter 40 Reputation Filter
ZyWALL Series CLI Reference Guide
332
40.3 URL Threat Filter Commands
The following table describes general URL Threat Filter commands. You must use the configure
terminal
command to enter the configuration mode before you can use these commands.
ip-reputation ebl update
weekly {sun
|mon|tue|wed|thu|fri|sat}
<0..23>
Sets the Zyxel Device to check for updates to the external black list once
per week, on the specified day at the specified hour.
ip-reputation ebl update
Checks for updates to the external black list immediately.
show ip-reputation ebl
Shows all IP Reputation external black list profiles.
show ip-reputation ebl
<profile name>
Shows the specified IP Reputation external black list profile.
show ip-reputation ebl
signature update
Shows whether automatic external black list updates are enabled, and the
schedule for the updates.
show ip-reputation ebl
<1..4> {date | number}
Shows how many addresses are in the specified external black list profile, or
the date that the external black list file was last updated.
The profile is identified by its ID number, which can be viewed by running
the command
show ip-reputation ebl.
Table 179 Commands for IP Reputation Statistics (continued)
COMMAND DESCRIPTION
Table 180 URL Threat Filter Commands
COMMAND DESCRIPTION
anti-botnet action {forward
| reject-both | reject-
receiver | reject-sender}
Sets what action the Zyxel Device takes when a packet contains a
malicious URL.
forward: The Zyxel Device allows the packet to go through.
reject-sender: The Zyxel Device blocks the packet and sends a TCP
RST to the sender.
reject-receiver: The Zyxel Device denies the packet and sends a TCP
RST to the receiver.
reject-both: The Zyxel Device denies the packets and sends a TCP RST
to both the sender and receiver.
[no] anti-botnet log
[alert]
Creates a log on the Zyxel Device (and sends an optional alert) when the
packet contains a malicious URL.
[no] security-service anti-
botnet-IP activate
Enables the URL Threat Filter service on the Zyxel Device.
The no command disables the service.
[no] threat-website trust-
list activate
Enables or disables the URL Threat Filter whitelist.
[no] threat-website forbid-
list activate
Enables or disables the URL Threat Filter black list.
show anti-botnet signatures
date
Displays the date and time the signature set was released.
show anti-botnet signatures
number
Displays the number of signatures in this set.