Add / Edit Custom Signatures - ZyXEL Communications USG40 User Manual

Table 184 Configuration > UTM Profile> IDP > Custom Signatures (continued)
LABEL
Customer
Signature Rule
Importing
File Path

27.3.1 Add / Edit Custom Signatures

Click the Add icon to create a new signature or click the Edit icon to edit an existing signature in
the screen as shown in
A packet must match all items you configure in this screen before it matches the signature. The
more specific your signature (including packet contents), then the fewer false positives the
signature will trigger.
Try to write signatures that target a vulnerability, for example a certain type of traffic on certain
operating systems, instead of a specific exploit.
Chapter 27 IDP
DESCRIPTION
Use this part of the screen to import custom signatures (previously saved to your
computer) to the ZyWALL/USG.
Note: The name of the complete custom signature file on the ZyWALL/USG is
'custom.rules'. If you import a file named 'custom.rules', then all custom signatures
on the ZyWALL/USG are overwritten with the new file. If this is not your intention,
make sure that the files you import are not named 'custom.rules'.
Type the file path and name of the custom signature file you want to import in the text
box (or click Browse to find it on your computer) and then click Importing to transfer
the file to the ZyWALL/USG.
New signatures then display in the ZyWALL/USG IDP > Custom Signatures screen.
Figure 308 on page
ZyWALL/USG Series User's Guide
458
457.