Unified Security Gateway User's Guide

Chapter 28 Anti-Virus
ZyWALL USG 300 User’s Guide
413
28.6 Anti-Virus Black List Add/Edit
From the Anti-X > Anti-Virus > Setting screen, click a black list Add icon or Edit icon to
display the following screen. Use this screen to create an anti-virus black list entry for a file
pattern that should cause the ZyWALL to log and delete a file.
Figure 318 Anti-X > Anti-Virus > Setting > Black List Add
The following table describes the labels in this screen.
28.7 Signature Searching
Click Anti-X > Anti-Virus > Signature to display this screen. Use this screen to locate
signatures and display details about them.
If Internet Explorer opens a warning screen about a script making Internet Explorer run slowly
and the computer maybe becoming unresponsive, just click No to continue.
Table 125 Anti-X > Anti-Virus > Setting > Black List Add
LABEL DESCRIPTION
Enable Select this option to have the ZyWALL apply this black list entry when using the
black list.
File Pattern Specify a pattern to identify the names of files that the ZyWALL should log and
delete.
Use up to 80 characters. Alphanumeric characters, underscores (_), dashes (-),
question marks (?) and asterisks (*) are allowed.
A question mark (?) lets a single character in the file name vary. For example, use
“a?.zip” (without the quotation marks) to specify aa.zip, ab.zip and so on.
Wildcards (*) let multiple files match the pattern. For example, use “*a.zip” (without
the quotation marks) to specify any file that ends with “a.zip”. A file named
“testa.zip would match. There could be any number (of any type) of characters in
front of the “a.zip” at the end and the file name would still match. A file named
“test.zipa” for example would not match.
A * in the middle of a pattern has the ZyWALL check the beginning and end of the
file name and ignore the middle. For example, with “abc*.zip”, any file starting with
“abc” and ending in “.zip” matches, no matter how many characters are in
between.
The whole file name has to match if you do not use a question mark or asterisk.
If you do not use a wildcard, the ZyWALL checks up to the first 80 characters of a
file name.
OK Click OK to save your changes.
Cancel Click Cancel to exit this screen without saving your changes.