Av Signature Searching - ZyXEL Communications USG40 User Manual

Table 188 Configuration > UTM > Anti-Virus > Profile: Profile Management > Add (continued)
LABEL
Destroy infected file
Log
File decompression
Enable file
decompression (ZIP
and RAR)
Destroy
compressed files
that could not be
decompressed
OK
Cancel

28.3 AV Signature Searching

Click Configuration > UTM Profile > Anti-Virus > Signature to display this screen. Use this
screen to locate signatures and display details about them.
If Internet Explorer opens a warning screen about a script making Internet Explorer run slowly and
the computer maybe becoming unresponsive, just click No to continue. Click a column's heading
cell to sort the table entries by that column's criteria. Click the heading cell again to reverse the sort
order.
Chapter 28 Anti-Virus
DESCRIPTION
When you select this check box, if a virus pattern is matched, the ZyWALL/USG
overwrites the infected portion of the file (and the rest of the file) with zeros. The un-
infected portion of the file before a virus pattern was matched goes through
unmodified.
These are the log options:
no: Do not create a log when a packet matches a signature(s).
log: Create a log on the ZyWALL/USG when a packet matches a signature(s).
log alert: An alert is an e-mailed log for more serious events that may need more
immediate attention. Select this option to have the ZyWALL/USG send an alert when
a packet matches a signature(s).
Select this check box to have the ZyWALL/USG scan a ZIP file (the file does not have
to have a "zip" or "rar" file extension). The ZyWALL/USG first decompresses the ZIP
file and then scans the contents for viruses.
Note: The ZyWALL/USG decompresses a ZIP file once. The ZyWALL/USG does NOT
decompress any ZIP file(s) within a ZIP file.
Note: When you select this option, the ZyWALL/USG deletes ZIP files that use
password encryption.
Select this check box to have the ZyWALL/USG delete any ZIP files that it is not
able to unzip. The ZyWALL/USG cannot unzip password protected ZIP files or a ZIP
file within another ZIP file. There are also limits to the number of ZIP files that the
ZyWALL/USG can concurrently unzip.
Note: The ZyWALL/USG's firmware package cannot go through the ZyWALL/USG
with this option enabled. The ZyWALL/USG classifies the firmware package
as not being able to be decompressed and deletes it.
You can upload the firmware package to the ZyWALL/USG with the option enabled,
so you only need to clear this option while you download the firmware package.
Click OK to save your changes.
Click Cancel to exit this screen without saving your changes.
ZyWALL/USG Series User's Guide
473