What's new

This section identifies new features and enhancements available with FortiSigConverter MEA 1.0.0 Beta.

For information about what's new in FortiManager, see the following New Features guides: For FortiManager 7.0, see the FortiManager 7.0 New Features Guide. For FortiManager 6.4, see the FortiManager 6.4 New Features Guide.

Multiple ADOMs

FortiManager 7.0.2 and later supports FortiSigConverter MEA in two or more ADOMs that are version 6.4 or later. When ADOMs are enabled, you only need to enable FortiSigConverter MEA once to make it available in all ADOMs.

However, you must select the correct ADOM before you import Snort signature files into FortiSigConverter MEA because the converted signature rules are only available for use in the same ADOM. If you want to use the same Snort signatures in two or more ADOMs, you must import the Snort signatures into the FortiSigConverter MEA in each ADOM where you want to use the converted signature rules.

The FortiSigConverter MEA audit log file only displays events for its ADOM.

Delete imported Snort files

You can now delete an imported Snort file and all its converted signature rules from FortiSigConverter MEA. Signature rules that have been pushed to FortiManager are not deleted. You must manually delete signature rules from the Policy & Objects module, if you no longer want to use them.