IPS signature update export

[rick11]

Hello,

I have this problem, every few month the IPS sourcefire signature got updated , let's say that the update might contain up to 5000 signatures (average)

From where can I download the database/signature list in advance to decide which signature to enable/disable?

The goal is to analyze the rule before enabling them , at the moment I enable all and then disable but it's generating a lot of false positives

Any idea or experience?

[Dennis Mink]

do you mean you are after a list of signatures and their CVE's and then based on that decide what to enable and what not?

if so, the reports section contains such a list

[Dennis Mink]

do you mean you are after a list of signatures and their CVE's and then based on that decide what to enable and what not? if so, the reports section contains such a list

[rick11]

I don't see a list in report section, maybe do we need to add a template?