https://community.cisco.com/t5/network-security/fmc-create-snort-rule/m-p/3761728#M983866 <P>Hi.&nbsp;</P> <P>&nbsp;</P> <P>I have a question about fmc create snort rule.</P> <P>&nbsp;</P> <P>alert tcp any any -&gt; any any (msg:"F-SCN-WEB-181102-wpscan_attempt"; flow:established, to_server; content:"User-Agent|3a 20|WPScan"; nocase; http_header; fast_pattern:only; metadata:service http; reference:url, github.com/wpscanteam/wpscan; classtype:webscan; sid:1101026; rev:1;)</P> <P>&nbsp;</P> <P>I want about this snort rule, How can I setting the options?</P> <P>&nbsp;</P> <P>Please help me...</P> Fri, 21 Feb 2020 16:33:51 GMT yunsh63 2020-02-21T16:33:51Z https://community.cisco.com/t5/network-security/fmc-create-snort-rule/m-p/3761728#M983866 <P>Hi.&nbsp;</P> <P>&nbsp;</P> <P>I have a question about fmc create snort rule.</P> <P>&nbsp;</P> <P>alert tcp any any -&gt; any any (msg:"F-SCN-WEB-181102-wpscan_attempt"; flow:established, to_server; content:"User-Agent|3a 20|WPScan"; nocase; http_header; fast_pattern:only; metadata:service http; reference:url, github.com/wpscanteam/wpscan; classtype:webscan; sid:1101026; rev:1;)</P> <P>&nbsp;</P> <P>I want about this snort rule, How can I setting the options?</P> <P>&nbsp;</P> <P>Please help me...</P> Fri, 21 Feb 2020 16:33:51 GMT https://community.cisco.com/t5/network-security/fmc-create-snort-rule/m-p/3761728#M983866 yunsh63 2020-02-21T16:33:51Z https://community.cisco.com/t5/network-security/fmc-create-snort-rule/m-p/3761800#M983878 Hi,<BR /><BR />I don't quite understand your queston. Do you need to know how to import it?<BR /><BR />Put it into a txt file - upload it (Updates &gt; Rule Updates&gt;. Once uploaded, enable it into the desired rule start in your Intrusion policy.<BR /><BR />Thanks Wed, 12 Dec 2018 09:05:18 GMT https://community.cisco.com/t5/network-security/fmc-create-snort-rule/m-p/3761800#M983878 phil.hydea 2018-12-12T09:05:18Z