Add / Edit Custom Signatures - ZyXEL Communications ZyWall 110 User Manual

Table 265 Configuration > UTM Profile> IDP > Custom Signatures (continued)
LABEL
Customer
Signature Rule
Importing
File Path

38.3.1 Add / Edit Custom Signatures

Click the Add icon to create a new signature or click the Edit icon to edit an existing signature in the
screen as shown in
A packet must match all items you configure in this screen before it matches the signature. The more
specific your signature (including packet contents), then the fewer false positives the signature will
trigger.
Try to write signatures that target a vulnerability, for example a certain type of traffic on certain
operating systems, instead of a specific exploit.
Chapter 38 IDP
DESCRIPTION
Use this part of the screen to import custom signatures (previously saved to your computer) to
the Zyxel Device.
Note: The name of the complete custom signature file on the Zyxel Device is
'custom.rules'. If you import a file named 'custom.rules', then all custom
signatures on the Zyxel Device are overwritten with the new file. If this is not
your intention, make sure that the files you import are not named
'custom.rules'.
Type the file path and name of the custom signature file you want to import in the text box (or
click Browse to find it on your computer) and then click Importing to transfer the file to the
Zyxel Device.
New signatures then display in the Zyxel Device IDP > Custom Signatures screen.
Figure 507 on page 728.
ZyWALL USG Series User's Guide
729