IPS Signature Export for Audit

Answered Question
Mar 20th, 2008

We have an auditor that wants to see all active signatures from our version 6.0(3) SSM-10s.

Is there any way to export all active signatures in report form? The auditor says he has received this from other clients.

We use CSM, ASDM, and MARS but I don't see any export options that address this.

Thanks!

I have this problem too.
0 votes
Correct Answer by marcabal about 8 years 8 months ago

The easiest method here is bring up IDM and go to the signatures configuration.

NOTE: You can use the viewing filters in IDM to only show signatures matching a certain criteria (like enabled).

Use your mouse to highlight/select all of the signatures.

NOTE: Do not use the Select All button.

Now use Ctrl-C to copy all of the entries.

Open Excel

Select the cell A1 and use Ctrl-V to paste the values into the spreadsheet.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
marcabal Thu, 03/20/2008 - 12:02

The easiest method here is bring up IDM and go to the signatures configuration.

NOTE: You can use the viewing filters in IDM to only show signatures matching a certain criteria (like enabled).

Use your mouse to highlight/select all of the signatures.

NOTE: Do not use the Select All button.

Now use Ctrl-C to copy all of the entries.

Open Excel

Select the cell A1 and use Ctrl-V to paste the values into the spreadsheet.

dgahm Thu, 03/20/2008 - 12:32

Marc,

I had tried the Select All. Works fine your way!

Regards, Dave

dennis.perez Tue, 04/15/2008 - 09:48

Can I used this method to export customer signatures from the IDS and import them into another IDS?

rhermes Wed, 04/16/2008 - 08:14

You can use CSM (free 90 day trial) to move custom sigs between sensors. Import the sensor with the custom sigs, make a policy out of the configuration and apply it to your other sensors.

attmidsteam Wed, 04/16/2008 - 10:01

=======

You can use CSM (free 90 day trial) to move custom sigs between sensors. Import the sensor with the custom sigs, make a policy out of the configuration and apply it to your other sensors.

=======

This method works very well, we used it to migrate our sensor policies from VMS to CSM.

Actions

This Discussion