topic Re: exporting rules in Network Security

exporting rules

evanleeseberg — Sun, 10 Mar 2019 11:55:38 GMT

Is there a way to export the rules off the IPS so the actual rules can exported? I am using a 4240 6.x IPS and through the GUI I am able to export a "summary" of the rules, but not the actual rules themselves.

Is there a way to do this through the CLI or GUI?

Let me know if this is confusing

Thanks

Evan

Re: exporting rules

jan.nielsen — Tue, 16 Mar 2010 21:39:05 GMT

I assume you are talking about the tuning rules you have created yourself and such ? if so, then just backup the config from the cli or the GUI, all the config is in there, actual signatures can't be backed up, they need to be reinstalled on the sensor if you have a restore situation.

Re: exporting rules

evanleeseberg — Tue, 16 Mar 2010 22:21:09 GMT

So rules I have created (custom signatures) are not treated as actual rules (they are not stored in the same place as Cisco's rules)? Are the actual rules Cisco developed accessible through the CLI for viewing?

Re: exporting rules

jan.nielsen — Wed, 17 Mar 2010 12:56:24 GMT

No, your "rules" are put into the configurations, signatures from cisco are downloaded in a compiled format and installed on the sensors harddrive as files, and compiled into the signature database. I don't think you can see any more details about a signature in the cli, than you can in the GUI, but i may be wrong

Re: exporting rules

evanleeseberg — Tue, 30 Mar 2010 22:28:52 GMT

Thanks

Re: exporting rules

Prabhakaran_as — Thu, 01 Nov 2018 02:37:32 GMT

It means we cannot export out the rules from CLI.

Is there any recommended option to export out the rules.please advise

Re: exporting rules

Prabhakaran_as — Thu, 01 Nov 2018 02:38:22 GMT

It means we cannot export out the rules from CLI.

Is there any recommended option to export out the rules.please advise