ZyXEL ZyWALL ATP700 User Guide - Page 583

Chapter 27 Anti-Malware The following table describes the fields in this screen. Table 223 Configuration > Security Service > Anti-Malware > Black/White List > Black List LABEL DESCRIPTION Check Black List Add Edit Remove Activate Inactivate # Status Type Select this check box to log and delete files with names or encryption algorithm (MD5 Hash) that match the black list patterns. Click this to create a new entry. Select an entry and click this to be able to modify it. Select an entry and click this to delete it. To turn on an entry, select it and click Activate. To turn off an entry, select it and click Inactivate. This is the entry's index number in the list. The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is inactive. This field displays the type (MD5 Hash or File Pattern) used to distinguish whether a file should be blocked. Value Select the type (MD5 Hash or File Pattern) that you want to use to distinguish whether a file should be blocked. This field displays the file or encryption pattern of the entry. Enter a file pattern that would cause the Zyxel Device to log and modify this file. Apply Reset • Use up to 80 characters. Alphanumeric characters, underscores (_), dashes (-), question marks (?) and asterisks (*) are allowed. • A question mark (?) lets a single character in the file name vary. For example, use "a?.zip" (without the quotation marks) to specify aa.zip, ab.zip and so on. • Wildcards (*) let multiple files match the pattern. For example, use "*a.zip" (without the quotation marks) to specify any file that ends with "a.zip". A file named "testa.zip would match. There could be any number (of any type) of characters in front of the "a.zip" at the end and the file name would still match. A file named "test.zipa" for example would not match. • A * in the middle of a pattern has the Zyxel Device check the beginning and end of the file name and ignore the middle. For example, with "abc*.zip", any file starting with "abc" and ending in ".zip" matches, no matter how many characters are in between. • The whole file name has to match if you do not use a question mark or asterisk. • If you do not use a wildcard, the Zyxel Device checks up to the first 80 characters of a file name. Click Apply to save your changes back to the Zyxel Device. Click Reset to return the screen to its last-saved settings. 27.5 Anti-Malware Signature Searching Click Configuration > Security Service > Anti-Malware > Signature to display this screen. Use this screen to locate signatures and display details about them. If your web browser opens a warning screen about a script making the web browser run slowly and the computer unresponsive, just click No to continue. Click a column's heading cell to sort the table entries by that column's criteria. Click the heading cell again to reverse the sort order. ZyWALL ATP Series User's Guide 583