Is there a way to export custom signatures from one IDS system to another. Either from the sensor, CDM or IDSM. Also is there a way to import Snort signatures and import them as Cisco sigs
No, there is unfortunately no method for doing that (would be VERY nice however). Also, be aware that the Cisco product (& TAC) does not handle custom signatures very well. It is also very easy to write signatures that use all memory on the sensors and crash them. YMMV
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.