ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Guía de usuario descargar pdf (Pagina 178)

Chapter 20 Anti-Virus

ZyWALL (ZLD) CLI Reference Guide

178

20.2.2.1 Zone to Zone Anti-virus Rule Example

This example shows how to configure (and display) a WAN to LAN antivirus rule to scan

HTTP traffic and destroy infected files. The white and black lists are ignored and zipped files

are decompressed. Any zipped files that cannot be decompressed are destroyed.

20.2.3 White and Black Lists

The following table describes the commands for configuring the white list and black list. You

must use the

configure terminal command to enter the configuration mode before you

can use these commands.

Router(config)# anti-virus rule 1

Router(config-av-rule-1)# activate

Router(config-av-rule-1)# from-zone WAN

Router(config-av-rule-1)# to-zone LAN

Router(config-av-rule-1)# scan http

Router(config-av-rule-1)# infected-action destroy

Router(config-av-rule-1)# bypass white-list

Router(config-av-rule-1)# no bypass black-list

Router(config-av-rule-1)# file-decompression

Router(config-av-rule-1)# no file-decompression unsupported

destroy

Router(config-av-rule-1)#exit

Router(config)# show anti-virus rule 1

Anti-Virus Rule: 1

active: yes

log: log

from zone: WAN

to zone: LAN

scan protocols:

http: yes

ftp : yes

smtp: yes

pop3: yes

imap4: yes

infected action:

destroy: yes

send windows message: yes

bypass white list: yes

bypass black list: no

file decompression: yes

destroy unsupported compressed file: no

Table 90 Commands for Anti-virus White and Black Lists

COMMAND DESCRIPTION

[no] anti-virus white-list activate Turn on the white list to have the ZyWALL not perform the

anti-virus check on files with names that match the white

list patterns.

[no] anti-virus white-list file-pattern

av_file_pattern {activate|deactivate}

Adds or removes a white list file pattern. Turns a file pattern

on or off.

anti-virus white-list replace

old_av_file_pattern new_av_file_pattern

{activate|deactivate}

Replaces the specified white list file pattern with a new file

pattern.

1 2 ... 173 174 175 176 177 178 179 180 181 182 183 ... 385 386

Comentarios a estos manuales

Sin comentarios

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Guía de usuario Pagina 178

Comentarios a estos manuales

Relacionado con productos y manuales para Gateways / Controladores ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1