ZyXEL Communications ZyWall ATP series User Manual page 528

Table 212 Configuration > Security Service > Anti-Malware (continued)
LABEL DESCRIPTION
Destroy infected file When you select this check box, if a malware pattern is matched, the Zyxel Device
overwrites the infected portion of the file (and the rest of the file) with zeros. The uninfected
portion of the file before a malware pattern was matched goes through unmodified.
Log These are the log options:
•
•
•
Check White List Select this check box to have the Zyxel Device not perform the anti-malware check on files
with names that match the white list patterns.
Add Click this to create a new entry.
Edit Select an entry and click this to be able to modify it.
Remove Select an entry and click this to delete it.
Activate To turn on an entry, select it and click Activate.
Inactivate To turn off an entry, select it and click Inactivate.
Status The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
# This is the entry's index number in the list.
File Pattern This is the file name pattern. If a file's name matches this pattern, the Zyxel Device does not
check the file for malware.
Check Black List Select this check box to log and delete files with names that match the black list patterns.
Add Click this to create a new entry.
Edit Select an entry and click this to be able to modify it.
Remove Select an entry and click this to delete it.
Activate To turn on an entry, select it and click Activate.
Inactivate To turn off an entry, select it and click Inactivate.
Status The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
# This is the entry's index number in the list.
File Pattern This is the file name pattern. If a file's name that matches this pattern, the Zyxel Device logs
and then destroys the file.
File decompression
Enable file Select this check box to have the Zyxel Device scan a ZIP file (the file does not have to have
decompression (ZIP a "zip" or "rar" file extension). The Zyxel Device first decompresses the ZIP file and then scans
and RAR) the contents for malware.
Note: The Zyxel Device decompresses a ZIP file once. The Zyxel Device does NOT
Chapter 28 Anti-Malware
no: Do not create a log when a packet matches a signature(s).
log: Create a log on the Zyxel Device when a packet matches a signature(s).
log alert: An alert is an emailed log for more serious events that may need more
immediate attention. Select this option to have the Zyxel Device send an alert when a
packet matches a signature(s).
decompress any ZIP file(s) within a ZIP file.
ZyWALL ATP Series User's Guide
528