ZyXEL ZyWALL ATP700 User Guide - Page 181

Chapter 6 Monitor The following table describes the labels in this screen. Table 66 Monitor > Security Statistics > Anti-Malware > Summary: Virus Name LABEL DESCRIPTION Collect Statistics Select this check box to have the Zyxel Device collect anti-malware statistics. Apply Reset Refresh Flush Data Total Viruses Detected Top Entries By The collection starting time displays after you click Apply. All of the statistics in this screen are for the time period starting at the time displayed here. The format is year, month, day and hour, minute, second. All of the statistics are erased if you restart the Zyxel Device or click Flush Data. Collecting starts over and a new collection start time displays. Click Apply to save your changes back to the Zyxel Device. Click Reset to return the screen to its last-saved settings. Click this button to update the report display. Click this button to discard all of the screen's statistics and update the report display. This field displays the number of different viruses that the Zyxel Device has detected. Use this field to have the following (read-only) table display the top anti-malware log entries by Virus Name, Source IP, and Destination IP, Source IPv6 and Destination IPv6. This table displays the most common, recent virus logs. See the log screen for less common virus logs or use a syslog server to record all virus logs. Select Virus Name to list the most common viruses that the Zyxel Device has detected. Select Source IP to list the source IP addresses from which the Zyxel Device has detected the most virus-infected files. Select Destination IP to list the most common destination IP addresses for virus-infected files that Zyxel Device has detected. Select Source IPv6 to list the source IPv6 addresses from which the Zyxel Device has detected the most virus-infected files. Add to white list Remove from white list # Virus name Hash Select Destination IPv6 to list the most common destination IPv6 addresses for virusinfected files that Zyxel Device has detected. Select an entry and click this to add it to the anti-malware white list. Select an entry and click this to remove it from the anti-malware white list. This field displays the entry's rank in the list of the top entries. This column displays when you display the entries by Virus Name. This displays the name of a detected virus. This column displays a hash value, MD5 (Message Digest 5) and SHA (Secure Hash Algorithm), of the detected virus file. Source IP Source IPv6 Destination IP Destination IPv6 Occurrences White List MD5 and SHA are hash algorithms used to authenticate packet data. This column displays when you display the entries by Source IP. It shows the source IP address of virus-infected files that the Zyxel Device has detected. his column displays when you display the entries by Source IPv6. It shows the source IPv6 address of virus-infected files that the Zyxel Device has detected. This column displays when you display the entries by Destination IP. It shows the destination IP address of virus-infected files that the Zyxel Device has detected. This column displays when you display the entries by Destination IPv6. It shows the destination IPv6 address of virus-infected files that the Zyxel Device has detected. This field displays how many times the Zyxel Device has detected the event described in the entry. Click this to add this signature to the anti-malware white list. Click this to remove this signature from the anti-malware white list. The statistics display as follows when you display the top entries by source IP. ZyWALL ATP Series User's Guide 181