How do I use IPS to block the download of a file that includes the EICAR string?
Zyxel_Jeff
Posts: 1,284 
Zyxel Employee
Zyxel Employee
Scenario :
The Zyxel firewall supports detecting EICAR-related strings by IPS service, this article will guide you on how to deploy it.
Answer :
Please go to Security Services, enable the IPS feature, and make sure that the signature 'Eicar Test String' is activated
Try to download a file containing an EICAR string via HTTP, for example, using You will be blocked by the IPS service.
What's wrong?
Sometimes, you may encounter a situation where the IPS cannot detect the 'Eicar Test String' in the Monitor log. The possible reason is related to the browser's cache. Please thoroughly clear the browser's cache before attempting to use IPS to detect the 'Eicar Test String'.
See how you've made an impact in Zyxel Community this year!
0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 151 Nebula Ideas
- 98 Nebula Status and Incidents
- 5.7K Security
- 277 USG FLEX H Series
- 277 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 75 Security Highlight