ZyXEL Communications ZyWall USG 2000 User Manual page 473

If the packets are not session connection setup packets (such as SYN, ACK and
2
FIN), the ZyWALL records the sequence of the packets.
The scanning engine checks the contents of the packets for virus.
3
If a virus pattern is matched, the ZyWALL removes the infected portion of the file
4
along with the rest of the file. The un-infected portion of the file before a virus
pattern was matched still goes through.
If the send alert message function is enabled, the ZyWALL sends an alert to the
5
file's intended destination computer(s).
Note: Since the ZyWALL erases the infected portion of the file before sending it, you
may not be able to open the file.
Notes About the ZyWALL Anti-Virus
The following lists important notes about the anti-virus scanner:
The ZyWALL anti-virus scanner can detect polymorphic viruses.
1
When a virus is detected, an alert message is displayed in Microsoft Windows
2
computers. Refer to
display the alert messages.
Changes to the ZyWALL's anti-virus settings affect new sessions (not the sessions
3
that already existed before you applied the changed settings).
The ZyWALL does not scan the following file/traffic types:
4
• Simultaneous downloads of a file using multiple connections. For example,
when you use FlashGet to download sections of a file simultaneously.
• Encrypted traffic. This could be password-protected files or VPN traffic where
the ZyWALL is not the endpoint (pass-through VPN traffic).
• Traffic through custom (non-standard) ports. The only exception is FTP traffic.
The ZyWALL scans whatever port number is specified for FTP in the ALG
screen.
• ZIP file(s) within a ZIP file.
Finding Out More
• See Section 5.4.14 on page 96
• See Section 30.7 on page 484
ZyWALL USG 2000 User's Guide
Appendix C on page 879
for related information on these screens.
for anti-virus background information.
Chapter 30 Anti-Virus
if your Windows computer does not
473