IPS Signature Export for Audit

Answered Question
Mar 20th, 2008
User Badges:
  • Blue, 1500 points or more

We have an auditor that wants to see all active signatures from our version 6.0(3) SSM-10s.


Is there any way to export all active signatures in report form? The auditor says he has received this from other clients.


We use CSM, ASDM, and MARS but I don't see any export options that address this.


Thanks!

Correct Answer by marcabal about 9 years 1 month ago

The easiest method here is bring up IDM and go to the signatures configuration.


NOTE: You can use the viewing filters in IDM to only show signatures matching a certain criteria (like enabled).


Use your mouse to highlight/select all of the signatures.

NOTE: Do not use the Select All button.


Now use Ctrl-C to copy all of the entries.


Open Excel


Select the cell A1 and use Ctrl-V to paste the values into the spreadsheet.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
marcabal Thu, 03/20/2008 - 12:02
User Badges:
  • Cisco Employee,

The easiest method here is bring up IDM and go to the signatures configuration.


NOTE: You can use the viewing filters in IDM to only show signatures matching a certain criteria (like enabled).


Use your mouse to highlight/select all of the signatures.

NOTE: Do not use the Select All button.


Now use Ctrl-C to copy all of the entries.


Open Excel


Select the cell A1 and use Ctrl-V to paste the values into the spreadsheet.


dgahm Thu, 03/20/2008 - 12:32
User Badges:
  • Blue, 1500 points or more

Marc,

I had tried the Select All. Works fine your way!


Regards, Dave

rhermes Fri, 03/21/2008 - 09:23
User Badges:
  • Gold, 750 points or more

Now, if only CSM could do that trick....

dennis.perez Tue, 04/15/2008 - 09:48
User Badges:

Can I used this method to export customer signatures from the IDS and import them into another IDS?

rhermes Wed, 04/16/2008 - 08:14
User Badges:
  • Gold, 750 points or more

You can use CSM (free 90 day trial) to move custom sigs between sensors. Import the sensor with the custom sigs, make a policy out of the configuration and apply it to your other sensors.

attmidsteam Wed, 04/16/2008 - 10:01
User Badges:
  • Silver, 250 points or more

=======

You can use CSM (free 90 day trial) to move custom sigs between sensors. Import the sensor with the custom sigs, make a policy out of the configuration and apply it to your other sensors.

=======


This method works very well, we used it to migrate our sensor policies from VMS to CSM.

Actions

This Discussion