ZyXEL Communications ATP200, Руководство пользователя

Страница: 528 / 852

Chapter 28 Anti-Malware
ZyWALL ATP Series User’s Guide
528
Destroy infected file When you select this check box, if a malware pattern is matched, the Zyxel Device
overwrites the infected portion of the file (and the rest of the file) with zeros. The uninfected
portion of the file before a malware pattern was matched goes through unmodified.
Log These are the log options:
• no : Do not create a log when a packet matches a signature(s).
• log : Create a log on the Zyxel Device when a packet matches a signature(s).
• log alert : An alert is an emailed log for more serious events that may need more
immediate attention. Select this option to have the Zyxel Device send an alert when a
packet matches a signature(s).
Check White List Select this check box to have the Zyxel Device not perform the anti-malware check on files
with names that match the white list patterns.
Add Click this to create a new entry.
Edit Select an entry and click this to be able to modify it.
Remove Select an entry and click this to delete it.
Activate To turn on an entry, select it and click Activate .
Inactivate To turn off an entry, select it and click Inactivate .
Status The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
# This is the entry’s index number in the list.
File Pattern This is the file name pattern. If a file’s name matches this pattern, the Zyxel Device does not
check the file for malware.
Check Black List Select this check box to log and delete files with names that match the black list patterns.
Add Click this to create a new entry.
Edit Select an entry and click this to be able to modify it.
Remove Select an entry and click this to delete it.
Activate To turn on an entry, select it and click Activate .
Inactivate To turn off an entry, select it and click Inactivate .
Status The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
# This is the entry’s index number in the list.
File Pattern This is the file name pattern. If a file’s name that matches this pattern, the Zyxel Device logs
and then destroys the file.
File decompression
Enable file
decompression (ZIP
and RAR) Select this check box to have the Zyxel Device scan a ZIP file (the file does not have to have
a “zip” or “rar” file extension). The Zyxel Device first decompresses the ZIP file and then scans
the contents for malware.
Note: The Zyxel Device decompresses a ZIP file once. The Zyxel Device does NOT
decompress any ZIP file(s) within a ZIP file.
Table 212 Configuration > Security Service > Anti-Malware (continued)
LABEL DESCRIPTION