ZyXEL Communications 1000 User Manual

ZyWALL USG 1000 User’s Guide

This chapter introduces ADP (Anomaly Detection and Prevention), anomaly 
profiles and applying an ADP profile to a traffic direction. ADP protects against 
anomalies based on violations of protocol standards (RFCs – Requests for 
Comments) and abnormal flows such as port scans.

ADP anomaly detection is in general effective against abnormal behavior while IDP 
packet inspection signatures are in general effective for known attacks (see 

 for information on packet inspection).

ADP traffic and anomaly rules are updated when you upload new firmware. This is 
different from the IDP packet inspection signatures and the system protect 
signatures you download from myZyXEL.com.

• Use Anti-X > ADP > General (

) to turn anomaly 

detection on or off and apply anomaly profiles to traffic directions.

• Use Anti-X > ADP > Profile (

) to add a new profile, 

edit an existing profile or delete an existing profile.

Traffic anomaly rules look for abnormal behavior or events such as port scanning, 
sweeping or network flooding. It operates at OSI layer-2 and layer-3. Traffic 
anomaly rules may be updated when you upload new firmware.