Exporting Custom Signatures

Unanswered Question
Apr 15th, 2008
User Badges:

Is there a way to export custom signatures from one IDS system to another. Either from the sensor, CDM or IDSM. Also is there a way to import Snort signatures and import them as Cisco sigs

This would be for IPS 4200 series devices

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
attmidsteam Tue, 04/15/2008 - 11:35
User Badges:
  • Silver, 250 points or more

No, there is unfortunately no method for doing that (would be VERY nice however). Also, be aware that the Cisco product (& TAC) does not handle custom signatures very well. It is also very easy to write signatures that use all memory on the sensors and crash them. YMMV


This Discussion