ZyXEL Communications 3.1 User Manual

 Chapter 21 Anti-Virus

ZyWALL (ZLD) CLI Reference Guide

anti-virus rule <1..32>

Enters the anti-virus sub-command mode to edit the specified direction 
specific rule.

[no] activate

Turns a direction specific anti-virus rule on or off.

[no] log [alert]

Sets the ZyWALL to create a log (and optionally an alert) when packets 
match this rule and are found to be virus-infected. The 

no

 command 

sets the ZyWALL not to create a log or alert when packets match this 
rule.

[no] from zone_object

Sets the zone on which the packets are received. The 

no

 command 

removes the zone on which the packets are received and resets it to the 
default (any). any means all interfaces or VPN tunnels.

[no] to zone_object

Sets the zone to which the packets are sent. The 

no

 command removes 

the zone to which the packets are sent and resets it to the default 
(any). any means all interfaces or VPN tunnels.

[no] scan {http | ftp | imap4 | smtp 

| pop3}

Sets the protocols of traffic to scan for viruses.

[no] infected-action {destroy | send-

win-msg}

Sets the action to take when the ZyWALL detects a virus in a file.  The 
file can be destroyed (filled with zeros from the point where the virus 
was found). The ZyWALL can also send a message alert to the file’s 
intended user using a Microsoft Windows computer connected to the to 
interface.

[no] bypass {white-list | black-list}

Have the ZyWALL not check files against a pattern list. 

[no] file-decompression [unsupported 

destroy]

Enable file decompression to have the ZyWALL attempt to  to 
decompress zipped files for further scanning. You can also have it 
destroy the zipped files it cannot decompress due to encryption or 
system resource limitations. 

show [all]

Displays the details of the anti-virus rule you are configuring or all the 
rules.

anti-virus rule move <1..32> to <1..32>

Moves a direction specific anti-virus rule to the number that you 
specified.

anti-virus rule delete <1..32>

Removes a direction specific anti-virus rule.

Commands for Zone to Zone Anti-Virus Rules (continued)