Exporting Custom Signatures

Unanswered Question
Apr 15th, 2008

Is there a way to export custom signatures from one IDS system to another. Either from the sensor, CDM or IDSM. Also is there a way to import Snort signatures and import them as Cisco sigs

This would be for IPS 4200 series devices

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
attmidsteam Tue, 04/15/2008 - 11:35

No, there is unfortunately no method for doing that (would be VERY nice however). Also, be aware that the Cisco product (& TAC) does not handle custom signatures very well. It is also very easy to write signatures that use all memory on the sensors and crash them. YMMV

Actions

This Discussion