ZyXEL Communications ZyXEL ZyWALL USG-1000, User Manual

Page: 507 / 986

Chapter 31 IDP
ZyWALL USG 2000 User’s Guide
507
Note: The ZyWALL checks all signatures and continues searching even after a match
is found. If two or more rules have conflicting actions for the same packet, then
the ZyWALL applies the more restrictive action (
reject-both, reject-receiver or
reject-sender, drop, none in this order). If a packet matches a rule for reject-
receiver and it also matches a rule for reject-sender , then the ZyWALL will
reject-both .
Figure 358 Anti-X > IDP > Custom Signatures
The following table describes the fields in this screen.
Table 152 Anti-X > IDP > Custom Signatures
LABEL DESCRIPTION
Custom
Signature
Rules Use this part of the screen to create, edit, delete or export (save to your
computer) custom signatures.
SID SID is the signature ID that uniquely identifies a signature. Click the SID
header to sort signatures in ascending or descending order. It is
automatically created when you click the Add icon to create a new
signature. You can edit the ID, but it cannot already exist and it must be in
the 9000000 to 9999999 range.
Name This is the name of your custom signature. Duplicate names can exist, but
it is advisable to use unique signature names that give some hint as to
intent of the signature and the type of attack it is supposed to prevent.
Add/Edit Click the Add icon to create a new signature or click the Edit icon to edit
an existing signature.
Delete Use this column to delete signatures. Select (or clear) the check boxes
next to individual signatures within the column. When you are certain that
you have only selected signatures that you want to remove, click the
Delete icon. Click OK in the confirm delete signature dialog box to delete
the selected signature(s).
Export Use this column to save signatures to your computer. Select (or clear) the
check box in the header column to select (or clear) all check boxes in that
column. You can also select (or clear) individual signatures within the
column. When you are certain that you have only selected signatures that
you want to save, click Export. Click Save in the file download dialog box
and then select a location and name for the file.
Custom signatures must end with the ‘rules’ file name extension, for
example, MySig.rules.