cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
806
Views
0
Helpful
1
Replies

Mapping of CVE Identifier to sourcefire ruleIDs

sai1234g24
Level 1
Level 1

how to find the list of sourcefire rule ids for a particular CVE Identifiers?

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

You can search for them in your IPS rule set. When a Cisco-provided rule addresses a particular CVE, that information will be included in the Rule details.

 

Just put the string such as is shown below ("reference:cve,<cve id>") in the filter and you will see the specific rule details:

 

IPS CVE.PNG

 

 

Review Cisco Networking for a $25 gift card