I was talking to zyxel support on some advice of setting up App Patrol. Misc question got us to me asking about how I saw the new Zyxel videos and how they had stuff setup with the UTM icons on Lan1_outgoing factory setting. I put my UTM policies there too. I surfed some malware sites and got a couple of hits 6 to 8 total on the AV, and 8 or so IDS hits. I brought up were I had the UTM policy on the Lan1 outgoing and the Zyxel guy said all I am doing is scanning outbound and that would mean my computer is very infected.
Can't be it, is a newly imaged Mac with AV that scans for PC malware and I scan with on-demand Dr Web too. The stuff I caught was PC based and Zyxel's Kaspersky has 22 Mac signatures that never hit. The Zyxel guy said I would need to make a rule from WAN to Lan1 and add the AV and IDS to that for incoming. But then why did I catch incoming stuff when I only had the UTM policy on Lan1 outgoing?
Then that would mean I would have to add just the Cyren content filter and App Patrol to Lan1 outgoing and make a rule Wan to Lan1 for AV and IDS??
What is the proper way to setup?
↧