Creating Or Editing A Custom Signature - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide
Table 117 Policy > IDP > Custom Signatures (continued)
LABEL
Importing
File Path

21.11.1 Creating or Editing a Custom Signature

Click the add icon to create a new signature or click the edit icon to edit an existing signature
in the screen as shown in
A packet must match all items you configure in this screen before it matches the signature. The
more specific your signature (including packet contents), then the fewer false positives the
signature will trigger.
Try to write signatures that target a vulnerability, for example a certain type of traffic on
certain operating systems, instead of a specific exploit.
362
DESCRIPTION
Use this part of the screen to import custom signatures (previously saved to your
computer) to the ZyWALL.
Note: The name of the complete custom signature file on the ZyWALL
is 'custom.rules'. If you import a file named 'custom.rules', then
all custom signatures on the ZyWALL are overwritten with the
new file. If this is not your intention, make sure that the files you
import are not named 'custom.rules'.
Type the file path and name of the custom signature file you want to import in the text
box (or click Browse to find it on your computer) and then click Import to transfer the
file to the ZyWALL.
New signatures then display in the ZyWALL IDP > Custom Signatures screen.
Figure 231 on page 361.
Chapter 21 IDP