Filter
Top Products
Chapter 21 Anti-Virus
ZyWALL (ZLD) CLI Reference Guide
177
21.2.3.1 White and Black Lists Example
This example shows how to enable the white list and configure an active white list entry for files
with a .exe extension. It also enables the black list and configure an inactive black list entry for files
with a .exe extension.
21.2.4 Signature Search Anti-virus Command
The following table describes the command for searching for signatures. You must use the
configure terminal command to enter the configuration mode before you can use this
command.
[no] anti-virus black-list file-pattern
av_file_pattern {activate|deactivate}
Adds or removes a black list file pattern. Turns a file pattern on or off.
anti-virus black-list replace
old_av_file_pattern new_av_file_pattern
{activate|deactivate}
Replaces the specified black list file pattern with a new file pattern.
Table 94 Commands for Anti-virus White and Black Lists (continued)
COMMAND DESCRIPTION
Router(config)# anti-virus white-list activate
Router(config)# anti-virus white-list file-pattern
Router(config)# anti-virus white-list file-pattern *.exe activate
Router(config)# anti-virus black-list activate
Router(config)# anti-virus black-list file-pattern *.exe deactivate
Router(config)# show anti-virus white-list status
anti-virus white-list status: yes
Router(config)# show anti-virus white-list
No. Status
File-Pattern
===========================================================================
1 yes
*.exe
Router(config)# show anti-virus black-list status
anti-virus black-list status: yes
Router(config)# show anti-virus black-list
No. Status
File-Pattern
===========================================================================
1 no
*.exe
Table 95 Command for Anti-virus Signature Search
COMMAND DESCRIPTION
anti-virus search signature {all |
category category | id id | name name
| severity severity [{from id to id}]
Search for signatures by their ID, name, severity, or category.
all: displays all signatures.
category: select whether you want to see virus signatures or spyware
signatures.
id: type the ID or part of the ID of the signature you want to find.
name: type the name or part of the name of the signature(s) you want to
find. This search is not case-sensitive.
severity: type the severity level of the signatures you want to find (high,
medium, or low).