ZyXEL Communications ZyWall USG 2000 User Manual page 475

Table 136 Anti-X > Anti-Virus > General (continued)
LABEL
Scan EICAR
Priority
From
To
Protocol
Add icon
ZyWALL USG 2000 User's Guide
DESCRIPTION
Select this option to have the ZyWALL check for the EICAR test file and
treat it in the same way as a real virus file. The EICAR test file is a
standardized test file for signature based anti-virus scanners. When the
virus scanner detects the EICAR file, it responds in the same way as if it
found a real virus. Besides straightforward detection, the EICAR file can
also be compressed to test whether the anti-virus software can detect it
in a compressed file. The test string consists of the following human-
readable ASCII characters.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-
TEST-FILE!$H+H*
This is the position of an anti-virus policy in the list. The ordering of
your anti-virus policies is important as the ZyWALL applies them in
sequence. Once traffic matches an anti-virus policy, the ZyWALL applies
that policy and does not check the traffic against any more policies.
The anti-virus policy has the ZyWALL scan traffic coming from this zone
and going to the To zone.
The anti-virus policy has the ZyWALL scan traffic going to this zone from
the From zone.
These are the protocols of traffic to scan for viruses.
FTP applies to traffic using the TCP port number specified for FTP in the
ALG screen.
HTTP applies to traffic using TCP ports 80, 8080 and 3128.
SMTP applies to traffic using TCP port 25.
POP3 applies to traffic using TCP port 110.
IMAP4 applies to traffic using TCP port 143.
Click the Add icon in the heading row to add a new first entry.
The Active displays whether the entry is enabled or not. Click it to
activate or deactivate the entry. Make sure you click Apply to save and
apply the change.
Click the Edit icon to go to the screen where you can edit the entry on
the ZyWALL.
Click the Add icon in an entry to add a policy below the current entry.
Click the Remove icon to delete an existing entry from the ZyWALL. A
window displays asking you to confirm that you want to delete the
entry. Note that subsequent entries move up by one when you take this
action.
In a numbered list, click the Move to N icon to display a field to type an
index number for where you want to put that entry and press [ENTER]
to move the entry to the number that you typed. For example, if you
type 6, the policy you are moving becomes number 6 and the previous
policy 6 (if there is one) gets pushed up (or down) one.
The ordering of your policies is important as they are applied in order of
their numbering.
Chapter 30 Anti-Virus
475