ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 221 / 426

Chapter 33 Anti-Virus
ZyWALL / USG (ZLD) CLI Reference Guide
221
33.2.2.1 Anti-Virus Profile Command Example
This is an example of anti-virus profile commands.
33.2.3 White and Black Lists
The following table describes the commands for configuring the white list and black list. You must
use the
configure terminal
command to enter the configuration mode before you can use
these commands.
[no] bypass {white-list | black-list}
Have the ZyWALL / USG not check files against a pattern list.
[no] file-decompression [unsupported
destroy]
Enable file decompression to have the ZyWALL / USG attempt to to
decompress zipped files for further scanning. You can also have it
destroy the zipped files it cannot decompress due to encryption or
system resource limitations.
show [all]
Displays the details of the anti-virus rule you are configuring or all
the rules.
anti-virus rule move <1..32> to <1..32>
Moves a direction specific anti-virus rule to the number that you
specified.
anti-virus rule delete <1..32>
Removes a direction specific anti-virus rule.
show anti-virus profile [ profile_name ]
Shows details of the named profile.
Table 121
anti-virus profile Commands
COMMAND DESCRIPTION
Router(config)# anti-virus office1
Router(config-av-profile-office1)# infected-action destroy
Router(config-av-profile-office1)# file-decompression
Router(config-av-profile-office1)# no file-decompression unsupported destroy
Router(config-av-profile-office1)# exit
Router(config)# show an
anti-spam anti-virus
Router(config)# show anti-virus profile office1
Anti-Virus Rule: 3
name: office1
description:
log: log
file decompression: yes
destroy unsupported compressed file: no
destroy infected compressed file: yes
reference count: 0
Table 122
Commands for Anti-virus White and Black Lists
COMMAND DESCRIPTION
[no] anti-virus white-list activate
Turn on the white list to have the ZyWALL / USG not perform the anti-virus
check on files with names that match the white list patterns.
[no] anti-virus white-list file-pattern
av_file_pattern {activate|deactivate}
Adds or removes a white list file pattern. Turns a file pattern on or off.
anti-virus white-list replace
old_av_file_pattern new_av_file_pattern
{activate|deactivate}
Replaces the specified white list file pattern with a new file pattern.
[no] anti-virus black-list activate
Turn on the black list to log and delete files with names that match the
black list patterns.