ZyXEL ZyWALL ATP700 User Guide - Page 586

CHAPTER 28 Reputation Filter 28.1 Overview Use the Reputation Filter screens to configure settings for IP Reputation and URL Threat filtering. 28.1.1 What You Need to Know IP Reputation IP reputation checks the reputation of an IP address from a database. An IP address with bad reputation associates with suspicious activities, such as spam, virus, and/or phishing. The Zyxel Device will respond when there are packets coming from an IPv4 address with bad reputation. URL Threat Filter URL filtering compares access to specific URLs against a database of blocked or allowed sites. Sites on the database are sorted into categories such as: 28.1.2 What You Can Do in this Chapter Use the IP Reputation screen (Section 28.2 on page 586) to enable IP reputation and specify what action the Zyxel Device takes when any IP address with bad reputation is detected. Use the URL Threat Filter screen (Section 28.3 on page 591) to enable URL Threat filtering and specify what action the Zyxel Device takes when any suspicious activity is detected. 28.2 IP Reputation Screen When you register for and enable the IP reputation service, your Zyxel Device downloads signature files that identifies reputation of IPv4 addresses. You can have the Zyxel Device forward, block, and/or log packets from IPv4 addresses based on these signatures and categories. Use this screen to enable IP reputation and specify the action the Zyxel Device takes when it detects a suspicious activity or a connection attempt to or from an IPv4 address with bad reputation. Click Configuration > Security Service > Reputation Filter > IP Reputation > General to display the configuration screen as shown next. ZyWALL ATP Series User's Guide 586