About the IPS Signatures Page

Tasks You Can Perform

You can perform the following tasks from this page:

• Associate IPS signatures to IPS policies. To do this, click IPS Policies link available below the IPS Signatures page title to directly navigate to the IPS Policies page. Then, click Add rules to assign the IPS signature to a specific policy. For more information, see Add Rules to an IPS Policy.

• View the list of IPS signature predefined attacks or attack groups. To do this, click the PREDEFINED tab and select Predefined Attacks or Predefined Attack Group from the View by list.

• View the details of a predefined IPS signature. To do this, select an existing IPS signature on the PREDEFINED tab and follow the available options:

  • Click More and select Detailed View.

  • Right-click on the selected IPS signature and select Detailed View.

  • Hover over to the left of the selected IPS signature name and click the Detailed View icon.

• View the custom signatures of custom attacks, static groups, or dynamic groups. To do this, click the CUSTOM tab and select Custom Attacks, Static Groups, or Dynamic Groups from the View by list.

• Import snort rules to convert them as custom attacks. See Import Snort Rules.

• Create IPS signature custom attacks. See Create a Custom IPS Signature.

• Create IPS signature static groups. See Create IPS Signature Static Groups.

• Create IPS signature dynamic groups. See Create IPS Signature Dynamic Group.

• View the details of an IPS signature for custom attacks, static groups, and dynamic groups. To do this, select an existing IPS signature, static group, or dynamic group on the CUSTOM tab and follow the available options:

  • Click More and select Detailed View.

  • Right-click on the selected IPS signature and select Detailed View.

  • Hover over to the left of the selected IPS signature and click Detailed View.

• Clone an IPS signature. See Clone an IPS Signature.

• Edit an IPS signature. See Edit an IPS Signature.

• Delete an IPS signature. See Delete an IPS Signature.

• Show or hide columns in the Predefined table. To do this, click the Show Hide Columns icon in the top right corner of the Predefined table. Then, select the options you want to view or clear the options you want to hide on the page.

• Advanced search for predefined or custom IPS signatures. To do this, use the search text box present above the table grid. The search includes the logical operators as part of the filter string. In the search text box, when you hover over the icon, it displays an example filter condition. When you start entering the search string, the icon indicates whether the filter string is valid or not.

  For an advanced search:

  1. Enter the search string in the text box.

     Based on your input, a list of items from the filter context menu appears.

  2. Select a value from the list and then select a valid operator based on which you want to perform the advanced search operation.

     Note:

     Press spacebar to add an AND operator or OR operator to the search string. Predefined signatures support only the AND operator. Press backspace at any time when typing a search criteria to delete only one character.

  3. Press Enter to display the search results in the grid.

Field Descriptions

Table 1 and Table 2 describes the fields on the IPS Signatures page.