cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
485
Views
0
Helpful
3
Replies

IDS 5.1(6)E1 Meta Engine Signatures

hendetl
Level 1
Level 1

Is there any documentation that shows ALL signatures associated with a meta signature? Thanks

1 Accepted Solution

Accepted Solutions

attmidsteam
Level 1
Level 1

The only definitive method is to look at the components of a signature when tuning it (via VMS for example).

View solution in original post

3 Replies 3

attmidsteam
Level 1
Level 1

The only definitive method is to look at the components of a signature when tuning it (via VMS for example).

That's what I was trying to avoid but was afraid it was the only way. Oh well, thank you very much for the response. Greatly appreciated.

mhellman
Level 7
Level 7

I'm not sure exactly what your after, but maybe this will help?

Nearly all signatures that are components of a meta signature do not have anything set in the action field. In the IDM, you can sort by the action column and you can copy/paste into Excel and massage as needed.

btw, I'm on V6..but as I recall you can do the same or similar with V5.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: