Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Highlighted
Community Member

IPS signature update export

Hello,

I have this problem, every few month the IPS sourcefire signature got updated , let's say that the update might contain up to 5000 signatures (average)

 

From where can I download the database/signature list in advance to decide which signature to enable/disable?

 

The goal is to analyze the rule before enabling them , at the moment I enable all and then disable but it's generating a lot of false positives

 

Any idea or experience?

3 REPLIES
VIP Green

Re: IPS signature update export

do you mean you are after a list of signatures and their CVE's and then based on that decide what to enable and what not?

 

if so, the reports section contains such a list

Please remember to rate useful posts, by clicking on the stars below.

VIP Green

Re: IPS signature update export

do you mean you are after a list of signatures and their CVE's and then based on that decide what to enable and what not? if so, the reports section contains such a list

Please remember to rate useful posts, by clicking on the stars below.

Everyone's tags (1)
Community Member

Re: IPS signature update export

I don't see a list in report section, maybe do we need to add a template?

166
Views
0
Helpful
3
Replies
CreatePlease to create content