Chapter 45 Collaborative Detection & Response
ZyWALL Series CLI Reference Guide
417
45.3.2 CDR Show Commands
This table shows the commands for showing CDR settings..
45.3.3 Update CDR Signatures
This table shows the commands for updating the CDR signatures..
cdr unblock mac mac_address
Unblocks an MAC address that is currently being blocked or quarantined.
This removes the address from the CDR containment list.
[no] cdr white-list ipv4
ip_address
Adds the IPv4 address to the exempt list. CDR will check traffic sent from
the IP address and always flag it as PASS.
The no command removes the IP address from the whitelist.
[no] cdr white-list mac
mac_address
Adds the MAC address to the exempt list. CDR will check traffic sent from
the MAC address and always flag it as PASS.
The no command removes the MAC address from the whitelist.
cdr white-list replace
<1..512> ipv4 ip_address
Replaces the numbered entry in the whitelist with the specified IPv4
address.
cdr white-list replace
<1..512> mac mac_address
Replaces the numbered entry in the whitelist with the specified MAC
address.
Table 224 CDR General Commands
COMMAND DESCRIPTION
Table 225 CDR Show Activation
COMMAND DESCRIPTION
show cdr block-list
Displays the CDR containment list. This list contains all devices currently
being blocked or quarantined.
show cdr event-list
Displays the CDR event (history) list. This list contains up to 1024 devices that
were previously blocked, quarantined, or triggered an alert.
show cdr rules
Displays all current CDR policies.
show cdr signature
Displays the version number and release date of the current CDR
signatures.
show cdr status
Displays all CDR settings, such as block period, block message, and
quarantine VLAN ID.
show cdr update
Displays the signature update schedule.
show cdr white-list
Displays all entries in the CDR exempt list. This consists of IPv4 and MAC
addresses.
Table 226 CDR Update Commands
COMMAND DESCRIPTION
cdr signature reload
Recovers CDR signatures. You only need to do this if instructed by a support
technician.
cdr signature update
Immediately downloads the latest CDR signatures.
[no] cdr update auto
Enables automatic CDR signature downloads, at the time and date set by
the daily/hourly/weekly command.
Use the no command to disable auto updates.