WSM User Guide - WatchGuard Technologies

CHAPTER 25Using Signature-Based SecurityServicesHackers use many methods to attack computers on the Internet. These attacks (called intrusions in thischapter) are created to cause damage to your network, get sensitive information, or use your computersto attack other networks.WatchGuard® offers the Gateway AntiVirus/Intrusion Prevention Service (GAV/IPS) that can identify andstop a possible intrusion. The Intrusion Prevention Service operates with all WatchGuard proxies. Watch-Guard Gateway AntiVirus operates with the SMTP, HTTP, and TCP proxies.When a new intrusion attack is identified, the features that make the virus or attack unique are recorded.These recorded features are known as the signature. GAV/IPS uses these signatures to find viruses andintrusion attacks.New viruses and intrusion methods appear on the Internet frequently. To make sure that GAV/IPS givesyou the best protection, you must update the signatures frequently. You can configure the Firebox® toupdate the signatures automatically from WatchGuard. You can also update the signatures manually.NoteWatchGuard cannot guarantee that the product can stop all viruses or intrusions, or prevent damage toyour systems or networks from a virus or intrusion attack.User Guide 307