Add / Edit Custom Signatures - ZyXEL Communications ZyWALL 1100 User Manual

Table 187 Configuration > UTM Profile> IDP > Custom Signatures (continued)
LABEL
Customer
Signature Rule
Importing
File Path

28.3.1 Add / Edit Custom Signatures

Click the Add icon to create a new signature or click the Edit icon to edit an existing signature in
the screen as shown in
A packet must match all items you configure in this screen before it matches the signature. The
more specific your signature (including packet contents), then the fewer false positives the
signature will trigger.
Try to write signatures that target a vulnerability, for example a certain type of traffic on certain
operating systems, instead of a specific exploit.
Chapter 28 IDP
DESCRIPTION
Use this part of the screen to import custom signatures (previously saved to your
computer) to the ZyWALL/USG.
Note: The name of the complete custom signature file on the ZyWALL/USG is
'custom.rules'. If you import a file named 'custom.rules', then all custom signatures
on the ZyWALL/USG are overwritten with the new file. If this is not your intention,
make sure that the files you import are not named 'custom.rules'.
Type the file path and name of the custom signature file you want to import in the text
box (or click Browse to find it on your computer) and then click Importing to transfer
the file to the ZyWALL/USG.
New signatures then display in the ZyWALL/USG IDP > Custom Signatures screen.
Figure 311 on page
ZyWALL/USG Series User's Guide
463
462.