ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 216 / 426

Chapter 32 Application Patrol
ZyWALL / USG (ZLD) CLI Reference Guide
216
32.2.1 Application Patrol Commands
This table lists the application patrol commands.
32.2.1.1 Application Patrol Command Examples
This command shows details of an application patrol profile created.
Table 118
app Commands: Application Patrol
COMMAND DESCRIPTION
app rename <profile-name> <profile-name>
Renames an existing profile
[no] app log_sid
Generate a log when traffic matches a signature in this category. The
no
command disables it.
show app statistics summary
Shows a summary of application patrol statistics (if any).
show app statistics collect
Shows if application patrol statistics gathering is enabled and if yes,
when.
[no] app statistics collect
Enables application patrol statistics gathering. The
no
command
disables it.
app statistics flush
Clears all application patrol statistics.
show app signatures version
Displays the App Patrol signature set version number. This number
gets larger as the set is enhanced.
show app signatures date
Displays the date (yyyy-mm-dd) and time the set was released.
show app profiles <profile-name>
Shows the description, application name, and object reference
number associated with the named profile.
show app profiles <profile-name> application
Shows the application name, action and log associated with the
named profile.
[no] app <profile-name>
Creates a profile with the specified name. You may use 1-31
alphanumeric characters, underscores(
_
), or dashes (-), but the first
character cannot be a number. This value is case-sensitive. The
no
command disables it.
[no] description DESCRIPTION
Write a description of the App Patrol Profile.
application <profile-name> action
{forward|drop|reject} {no log|log
[alert]}
Sets the action and generates a log, log and alert or neither (
no
)
when traffic matches a signature in this profile. Actions are:
• forward - routes packets that matches these signatures.
• Drop - silently drops packets that matches these signatures
without notification.
• Reject - drops packets that matches these signatures and sends
notification.
no application-object <profile-name>
Removes the application object from the named profile.
Router# show app profiles
APP-patrol: 1
profile name: app1
description:
application: ultrasurf_app
ref: 1