Signature Searching - ZyXEL Communications ZyWall 5 Series User Manual

ZyWALL 5/35/70 Series User's Guide
Table 82 SECURITY > ANTI-VIRUS > General (continued)
LABEL
Available Service
Service
Active
From, To
Protected Interface Select the interface(s) where you want the ZyWALL to scan files for viruses.
Apply
Reset

14.4 Signature Searching

Click SECURITY > ANTI-VIRUS > Signature to display this screen. Use this screen to
locate signatures and manage how the ZyWALL uses them.
276
DESCRIPTION
This field displays the service names and standard port numbers that identify them.
Select a service to display and configure anti-virus settings for it.
Select Active to enable the anti-virus scanner for the selected service.
Select the directions of travel of packets that you want to check. Select or clear a
row or column's first check box (with the interface label) to select or clear the
interface's whole row or column.
For example, From LAN To LAN means packets traveling from a computer on one
LAN subnet to a computer on another LAN subnet on the LAN interface of the
ZyWALL or the ZyWALL itself. The ZyWALL does not check packets traveling from
a LAN computer to another LAN computer on the same subnet.
From VPN means traffic that came into the ZyWALL through a VPN tunnel and is
going to the selected "to" interface. For example, From VPN To LAN specifies the
VPN traffic that is going to the LAN or terminating at the ZyWALL's LAN interface.
The ZyWALL checks the traffic after decrypting it.
To VPN is traffic that comes in through the selected "from" interface and goes out
through any VPN tunnel. For example, From LAN To VPN specifies the traffic that
is coming from the LAN and going out through a VPN tunnel. The ZyWALL checks
the traffic before encrypting it.
From VPN To VPN means traffic that comes in through a VPN tunnel and goes out
through (another) VPN tunnel or terminates at the ZyWALL. This is the case when
the ZyWALL is the hub in a hub-and-spoke VPN. This is also the case if you allow
someone to use a service (like Telnet or HTTP) through a VPN tunnel to manage
the ZyWALL. The ZyWALL checks the traffic after decrypting it (before encrypting it
again).
Note: The VPN connection directions apply to the traffic going to or
from the ZyWALL's VPN tunnels. They do not apply to other
VPN traffic for which the ZyWALL is not one of the gateways
(VPN pass-through traffic).
Choices are LAN, WAN (or WAN1, WAN2) and DMZ.
Click Apply to save your changes.
Click Reset to start configuring this screen again.
Chapter 14 Anti-Virus