ZyWALL Series CLI Reference Guide
428
CHAPTER 47
IP Exception
47.1 IP Exception Overview
IP Exception allows incoming IP packets to bypass specific security services based on the packet’s
source or destination address. Bypassing a security service means the security service does not intercept
or inspect the packet. IP Exception supports bypassing the following security services:
• Antivirus (including sandboxing)
• Intrusion Detection and Prevention (IDP)
• IP Reputation
•URL Threat Filter
47.2 IP Exception Commands
The Zyxel Device excludes incoming packets that match any IP Exception rule. Each IP Exception rule
contains a source address, destination address, and a list of bypassed services. The following table
identifies the values required for many IP Exception commands..
Table 236 General Input Values for IP Exception List Commands
LABEL DESCRIPTION
<profile-name>
The name of an IP Exception rule. You may use 1-31 alphanumeric characters,
underscores(
_), or dashes (-), but the first character cannot be a number. This value is case-
sensitive.
address_name
The source or destination address of an IP packet. The address name can be any of the
following:
•Address object name
•Address group object name
•FQDN object name
• Geo IP object name
For details on addresses, see Chapter 52 on page 460.