ZyXEL Communications ZyWall ATP series User Manual page 545

Chapter 30 IDP
A packet must match all items you configure in this screen before it matches the signature. The more
specific your signature (including packet contents), then the fewer false positives the signature will
trigger.
Try to write signatures that target a vulnerability, for example a certain type of traffic on certain
operating systems, instead of a specific exploit.
Figure 357 Configuration > Security Service > IDP > Custom Signatures > Add/Edit
ZyWALL ATP Series User's Guide
545