ZyXEL Communications ZyWall USG 2000 User Manual page 507

Note: The ZyWALL checks all signatures and continues searching even after a match
is found. If two or more rules have conflicting actions for the same packet, then
the ZyWALL applies the more restrictive action (reject-both, reject-receiver or
reject-sender, drop, none in this order). If a packet matches a rule for reject-
receiver and it also matches a rule for reject-sender, then the ZyWALL will
reject-both.
Figure 358 Anti-X > IDP > Custom Signatures
The following table describes the fields in this screen.
Table 152 Anti-X > IDP > Custom Signatures
LABEL
Custom
Signature
Rules
SID
Name
Add/Edit
Delete
Export
ZyWALL USG 2000 User's Guide
DESCRIPTION
Use this part of the screen to create, edit, delete or export (save to your
computer) custom signatures.
SID is the signature ID that uniquely identifies a signature. Click the SID
header to sort signatures in ascending or descending order. It is
automatically created when you click the Add icon to create a new
signature. You can edit the ID, but it cannot already exist and it must be in
the 9000000 to 9999999 range.
This is the name of your custom signature. Duplicate names can exist, but
it is advisable to use unique signature names that give some hint as to
intent of the signature and the type of attack it is supposed to prevent.
Click the Add icon to create a new signature or click the Edit icon to edit
an existing signature.
Use this column to delete signatures. Select (or clear) the check boxes
next to individual signatures within the column. When you are certain that
you have only selected signatures that you want to remove, click the
Delete icon. Click OK in the confirm delete signature dialog box to delete
the selected signature(s).
Use this column to save signatures to your computer. Select (or clear) the
check box in the header column to select (or clear) all check boxes in that
column. You can also select (or clear) individual signatures within the
column. When you are certain that you have only selected signatures that
you want to save, click Export. Click Save in the file download dialog box
and then select a location and name for the file.
Custom signatures must end with the 'rules' file name extension, for
example, MySig.rules.
Chapter 31 IDP
507