ZyXEL ZyWALL ATP700 User Guide - Page 577

Chapter 27 Anti-Malware • Use the White List screen (Section 27.3 on page 581) to specify the file or encryption pattern to allow in order to avoid false positives. False positives occur when a non-infected file matches a malware signature. • Use the Black List screen (Section 27.4 on page 582) to specify the file or encryption pattern that you want to block. • Use the Signature screen (Section 27.5 on page 583) to search for particular signatures and get more information about them. 27.2 Anti-Malware Screen Click Configuration > Security Service > Anti-Malware to display the configuration screen as shown next. Click the Anti-Malware icon for more information on the Zyxel Device's security features. Note: Threat Intelligence Machine Learning (TIML) is not available if the gold security pack has expired. See Subscription Services Available on page 198 for more information on the subscription services for the two types of security packs. Note: If Destroy infected file is disabled and log is set to no, the Zyxel Device will still perform the scan but will not do anything else. It is recommended to enable at least one of the two functions. If Destroy infected file is disabled, any malicious file found can still be executed by the end user after it is forwarded. The administrator would have to inform the user if there is an infected file. ZyWALL ATP Series User's Guide 577