ZyXEL Communications ZYWALL - CLI Reference Manual page 284

Chapter 34 Endpoint Security
Table 159 Endpoint Security Object Commands
COMMAND
os-type {windows | linux |
mac-osx | others}
windows-version {windows-2000
| windows-xp | windows-2003 |
windows-2008 | windows-vista
| windows-7 | windows-2008r2}
matching-criteria {any | all}
list signature {anti-virus |
personal-firewall | status}
[no] windows-auto-update
{enable | disable | ignore}
[no] windows-service-pack
<1..10>
[no] windows-security-patch
security_patch
[no] windows-registry
registry_key {eq | gt | lt |
ge | le | neq} registry_value
show eps profile [profile_name]
show eps profile profile_name
signature {anti-virus | personal-
firewall}
284
DESCRIPTION
Select the type of operating system the user's computer must be
using. Use the windows-version command to configure the
checking items according to the set operating system. If you set this
to mac-osx, there are no other checking items.
others allows access for computers not using Windows, Linux, or
Mac OSX operating systems. For example you create Windows,
Linux, and Mac OSX endpoint security objects to apply to your LAN
users. An "others" policy allows access for LAN computers using
Solaris, HP, Android, or other operating systems.
If you set windows as the operating system (using the os-type
command), use this command to set the version of Windows.
Select whether the user's computer has to match just one of the
endpoint security object's checking criteria or all of them.
Displays all the anti-virus software packages, personal firewall
software packages or EPS signature information respectively.
The status command displays the EPS signature version, release
date and the total number of software packages for which the
ZyWALL's endpoint security can check.
If you set windows as the operating system (using the os-type
command), you can use enable with this command if the user's
computer must have the Windows Auto Update feature installed and
activated; use disable if the Windows Auto Update feature must be
installed but deactivated; use ignore if the Windows Auto Update
feature must be installed but does not matter if it is activated or not.
The no command does not check the Windows Auto Update feature.
If you set windows as the operating system (using the os-type
command), you can enter the minimum Windows service pack
number the user's computer must have installed. The user's
computer must have this service pack or higher. For example, "2"
means service pack 2. The no command means to have the
ZyWALL ignore the Windows service pack number.
If you set windows as the operating system (using the os-type
command), you can use this command to set a Windows security
patch that the user's computer must have installed. If you want to
enter multiple security patches, use this command for each of them.
The user's computer must have all of the set Windows security
patches installed to pass the checking item.
If you set windows as the operating system (using the os-type
command), you can use this command to set a Windows registry
value to check on the user's computer. If you want to enter multiple
registry values, use this command for each of them.
Set whether the value for the registry item in the user's computer has
to be equal to (eq), greater than (gt), less than (lt), greater than or
equal to (ge), less than or equal to (le), or not equal to (neq) the
value specified.
The user's computer must pass all of the set Windows registry value
checks to pass the checking item.
Displays the settings of all or the specified endpoint security object.
Displays Anti-Virus or personal firewall signatures that have been
added to the specified endpoint security object.
ZyWALL (ZLD) CLI Reference Guide