ZyXEL Communications ZyWall ATP series User Manual page 163

The following table describes the labels in this screen.
Table 61 Monitor > Security Statistics > Anti-Malware > Summary: Virus Name
LABEL DESCRIPTION
Collect Statistics Select this check box to have the Zyxel Device collect anti-malware statistics.
The collection starting time displays after you click Apply. All of the statistics in this screen
are for the time period starting at the time displayed here. The format is year, month, day
and hour, minute, second. All of the statistics are erased if you restart the Zyxel Device or
click Flush Data. Collecting starts over and a new collection start time displays.
Apply Click Apply to save your changes back to the Zyxel Device.
Reset Click Reset to return the screen to its last-saved settings.
Refresh Click this button to update the report display.
Flush Data Click this button to discard all of the screen's statistics and update the report display.
Total Viruses Detected This field displays the number of different viruses that the Zyxel Device has detected.
Top Entries By Use this field to have the following (read-only) table display the top anti-malware log
entries by Virus Name, Source IP, and Destination IP, Source IPv6 and Destination IPv6.
This table displays the most common, recent virus logs. See the log screen for less
common virus logs or use a syslog server to record all virus logs.
Select Virus Name to list the most common viruses that the Zyxel Device has detected.
Select Source IP to list the source IP addresses from which the Zyxel Device has detected
the most virus-infected files.
Select Destination IP to list the most common destination IP addresses for virus-infected
files that Zyxel Device has detected.
Select Source IPv6 to list the source IPv6 addresses from which the Zyxel Device has
detected the most virus-infected files.
Select Destination IPv6 to list the most common destination IPv6 addresses for virus-
infected files that Zyxel Device has detected.
# This field displays the entry's rank in the list of the top entries.
Virus name This column displays when you display the entries by Virus Name. This displays the name
of a detected virus.
Hash This column displays a hash value, MD5 (Message Digest 5) and SHA (Secure Hash
Algorithm), of the detected virus file.
MD5 and SHA are hash algorithms used to authenticate packet data.
Source IP This column displays when you display the entries by Source IP. It shows the source IP
address of virus-infected files that the Zyxel Device has detected.
Source IPv6 his column displays when you display the entries by Source IPv6. It shows the source IPv6
address of virus-infected files that the Zyxel Device has detected.
Destination IP This column displays when you display the entries by Destination IP. It shows the
destination IP address of virus-infected files that the Zyxel Device has detected.
Destination IPv6 This column displays when you display the entries by Destination IPv6. It shows the
destination IPv6 address of virus-infected files that the Zyxel Device has detected.
Occurrences This field displays how many times the Zyxel Device has detected the event described in
the entry.
The statistics display as follows when you display the top entries by source IP.
Chapter 6 Monitor
ZyWALL ATP Series User's Guide
163