topic Re: IPS Signature Export for Audit in Network Security

IPS Signature Export for Audit

dgahm — Sun, 10 Mar 2019 11:02:29 GMT

We have an auditor that wants to see all active signatures from our version 6.0(3) SSM-10s.

Is there any way to export all active signatures in report form? The auditor says he has received this from other clients.

We use CSM, ASDM, and MARS but I don't see any export options that address this.

Thanks!

Re: IPS Signature Export for Audit

marcabal — Thu, 20 Mar 2008 19:02:24 GMT

The easiest method here is bring up IDM and go to the signatures configuration.

NOTE: You can use the viewing filters in IDM to only show signatures matching a certain criteria (like enabled).

Use your mouse to highlight/select all of the signatures.

NOTE: Do not use the Select All button.

Now use Ctrl-C to copy all of the entries.

Open Excel

Select the cell A1 and use Ctrl-V to paste the values into the spreadsheet.

Re: IPS Signature Export for Audit

dgahm — Thu, 20 Mar 2008 19:32:40 GMT

Marc,

I had tried the Select All. Works fine your way!

Regards, Dave

Re: IPS Signature Export for Audit

rhermes — Fri, 21 Mar 2008 16:23:07 GMT

Now, if only CSM could do that trick....

Re: IPS Signature Export for Audit

dennis.perez — Tue, 15 Apr 2008 16:48:53 GMT

Can I used this method to export customer signatures from the IDS and import them into another IDS?

Re: IPS Signature Export for Audit

rhermes — Wed, 16 Apr 2008 15:14:43 GMT

You can use CSM (free 90 day trial) to move custom sigs between sensors. Import the sensor with the custom sigs, make a policy out of the configuration and apply it to your other sensors.

Re: IPS Signature Export for Audit

attmidsteam — Wed, 16 Apr 2008 17:01:17 GMT

=======

You can use CSM (free 90 day trial) to move custom sigs between sensors. Import the sensor with the custom sigs, make a policy out of the configuration and apply it to your other sensors.

=======

This method works very well, we used it to migrate our sensor policies from VMS to CSM.