ZyXEL Communications ZyWALL USG-Series - Anti-Virus Profile; General Anti-Virus Commands

Chapter 33 Anti-Virus
ZyWALL / USG (ZLD) CLI Reference Guide
220
33.2.1 General Anti-virus Commands
The following table describes general anti-virus commands. You must use the configure
terminal
command to enter the configuration mode before you can use these commands.
Note: You must register for the anti-virus service before you can use it (see Chapter 5 on
page 49).
33.2.2 Anti-Virus Profile
This table lists the AV profile-related commands.
Table 120 General Anti-virus Commands
COMMAND DESCRIPTION
[no] anti-virus activate Enables anti-virus service. Anti-virus service also depends on anti-virus service
registration.
show anti-virus activation Displays anti-virus service status.
show anti-virus eicar activation Displays anti-virus eicar status.
[no] anti-virus eicar activate Turns detection of the EICAR test file on or off.
anti-virus reload signatures Recovers the anti-virus signatures. You should only need to do this if instructed to
do so by a support technician.
[no] anti-virus skip-unknown-
file-type activate
Sets whether or not anti-virus checks files for which the ZyWALL / USG cannot
identify a type.
show anti-virus skip-unknown-
file-type activation
Displays whether or not anti-virus checks files for which the ZyWALL / USG cannot
identify a type.
anti-virus mail-infect-ext
activate
Has the ZyWALL / USG add a notification text file to an e-mail after destroying a
virus-infected e-mail attachment.
no anti-virus mail-infect-ext
activate
Has the ZyWALL / USG not add a notification text file to an e-mail after destroying
a virus-infected e-mail attachment.
Table 121 anti-virus profile Commands
COMMAND DESCRIPTION
anti-virus rename old_profile_name
new_profile_name
Renames the AV profile.
anti-virus profile_name Enters the anti-virus sub-command mode to edit the specified
direction specific profile.
[no] infected-action destroy Sets the action to take when the ZyWALL / USG finds a virus in a file.
[no] file-decompression [unsupported
destroy]
Enable file decompression to have the ZyWALL / USG attempt to to
decompress zipped files for further scanning. You can also have it
destroy the zipped files it cannot decompress due to encryption or
system resource limitations.
[no] log [alert] Sets if the ZyWALL / USG should create a log or alert if it finds a virus
in a file.
description Describes the profile.
[no] scan {http | ftp | imap4 | smtp |
pop3}
Sets the protocols of traffic to scan for viruses.
[no] infected-action {destroy | send-
win-msg}
Sets the action to take when the ZyWALL / USG detects a virus in a
file. The file can be destroyed (filled with zeros from the point where
the virus was found). The ZyWALL / USG can also send a message
alert to the file’s intended user using a Microsoft Windows computer
connected to the to interface.