ZyXEL Communications 91-009-073003B Router User Manual


 
Chapter 29 Anti-Virus
ZyWALL USG 50 User’s Guide
467
Scan EICAR Select this option to have the ZyWALL check for the EICAR test file and
treat it in the same way as a real virus file. The EICAR test file is a
standardized test file for signature based anti-virus scanners. When the
virus scanner detects the EICAR file, it responds in the same way as if it
found a real virus. Besides straightforward detection, the EICAR file can
also be compressed to test whether the anti-virus software can detect it
in a compressed file. The test string consists of the following human-
readable ASCII characters.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-
TEST-FILE!$H+H*
Policies
Add Click this to create a new entry. Select an entry and click Add to create
a new entry after the selected entry.
Edit Select an entry and click this to be able to modify it.
Remove Select an entry and click this to delete it.
Activate To turn on an entry, select it and click Activate.
Inactivate To turn off an entry, select it and click Inactivate.
Move To change an entry’s position in the numbered list, select it and click
Move to display a field to type a number for where you want to put that
entry and press [ENTER] to move the entry to the number that you
typed.
Status The activate (light bulb) icon is lit when the entry is active and dimmed
when the entry is inactive.
Priority This is the position of an anti-virus policy in the list. The ordering of
your anti-virus policies is important as the ZyWALL applies them in
sequence. Once traffic matches an anti-virus policy, the ZyWALL applies
that policy and does not check the traffic against any more policies.
From The anti-virus policy has the ZyWALL scan traffic coming from this zone
and going to the To zone.
To The anti-virus policy has the ZyWALL scan traffic going to this zone from
the From zone.
Protocol These are the protocols of traffic to scan for viruses.
FTP applies to traffic using the TCP port number specified for FTP in the
ALG screen.
HTTP applies to traffic using TCP ports 80, 8080 and 3128.
SMTP applies to traffic using TCP port 25.
POP3 applies to traffic using TCP port 110.
IMAP4 applies to traffic using TCP port 143.
License The following fields display information about the current state of your
subscription for virus signatures.
License
Status
This field displays whether a service is activated (Licensed) or not (Not
Licensed) or expired (Expired).
Table 135 Configuration > Anti-X > Anti-Virus > General (continued)
LABEL DESCRIPTION