Configuring Custom Signatures; Figure 330 Anti-X > Idp > Custom Signatures - ZyXEL Communications Unified Security Gateway ZyWALL 1000 User Manual

Chapter 29 IDP
Table 135 IP v4 Packet Headers (continued)
HEADER
Options
Padding

29.10 Configuring Custom Signatures

Select Anti-X > IDP > Custom Signatures. The first screen shows a summary of all custom
signatures created. Click the SID or Name heading to sort. Click the Add icon to create a new
signature or click the Edit icon to edit an existing signature. You can delete signatures here or
save them to your computer.
The ZyWALL checks all signatures and continues searching even after a
match is found. If two or more rules have conflicting actions for the same
packet, then the ZyWALL applies the more restrictive action (reject-both,
reject-receiver or reject-sender, drop, none in this order). If a packet
matches a rule for reject-receiver and it also matches a rule for reject-
sender, then the ZyWALL will reject-both.
Figure 330 Anti-X > IDP > Custom Signatures
434
DESCRIPTION
IP options is a variable-length list of IP options for a datagram that
define IP Security Option, IP Stream Identifier, (security and
handling restrictions for the military), Record Route (have each
router record its IP address), Loose Source Routing (specifies a
list of IP addresses that must be traversed by the datagram), Strict
Source Routing (specifies a list of IP addresses that must ONLY
be traversed by the datagram), Timestamp (have each router
record its IP address and time), End of IP List and No IP Options.
Padding is used as a filler to ensure that the IP packet is a multiple
of 32 bits.
ZyWALL USG 1000 User's Guide