Fortinet black logo

Viewing converted signature rules

7.0.2
Copy Link
Copy Doc ID 4e388918-8ddc-11ec-9fd1-fa163e15d75b:725694
Download PDF

Viewing converted signature rules

After Snort signature files are imported to FortiSigConverter MEA, you can view a list of converted signature rules and filter the list by clicking each column heading.

To view imported Snort signature rules:
  1. Go to IPS Custom Signature.

    The list of imported Snort files is displayed.

  2. Click a Snort file to view its list of converted signature rules.

    By default, the <number> Total Rules column is selected, and all signature rules are displayed.

  3. Click each column heading to filter the list of displayed signature rules.
    • Click <number> Failed to Convert to display only the signature rules that failed to convert from Snort signature files to Fortinet supported IPS signatures.
    • Click <number> Failed to Push to display only the signature rules that failed to be pushed from FortiSigConverter MEA to FortiManager.
    • Click <number> Unpushed to display signature rules that have not yet been pushed from FortiSigConverter MEA to FortiManager.
  4. Click <number> Total Rules to display all signature rules again.

Viewing converted signature rules

After Snort signature files are imported to FortiSigConverter MEA, you can view a list of converted signature rules and filter the list by clicking each column heading.

To view imported Snort signature rules:
  1. Go to IPS Custom Signature.

    The list of imported Snort files is displayed.

  2. Click a Snort file to view its list of converted signature rules.

    By default, the <number> Total Rules column is selected, and all signature rules are displayed.

  3. Click each column heading to filter the list of displayed signature rules.
    • Click <number> Failed to Convert to display only the signature rules that failed to convert from Snort signature files to Fortinet supported IPS signatures.
    • Click <number> Failed to Push to display only the signature rules that failed to be pushed from FortiSigConverter MEA to FortiManager.
    • Click <number> Unpushed to display signature rules that have not yet been pushed from FortiSigConverter MEA to FortiManager.
  4. Click <number> Total Rules to display all signature rules again.