Great information.Note that there is now a whitepaper on writing custom sigs. It can be found at http://www.cisco.com/web/about/security/intelligence/ips_custom_sigs.html.

Hi Brent,You can find the latest signatures @ http://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=278875311. Navigate to "Security > Cisco IPS Sensor Software Version 7.0 > Intrusion Prevention System (IPS) Signature Updates".This link sho...

Hi Will,The IPS team is aware of this issue and investigating. An upcoming sig update will address these sigs.- Shiva

You can find information on using the custom signature wizard here: http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a0080618a2a.html-- Shiva