Viewing signature rules on FortiManager

After you push converted signature rules from FortiSigConverter MEA to FortiManager, they are displayed as custom IPS signatures on the Policy & Objects module.

This section describes how to view custom IPS signatures in the following versions of FortiManager:

• For FortiManager 7.0, see FortiManager 7.0.
• For FortiManager 6.4, see FortiManager 6.4.

FortiManager 7.0

In FortiManager 7.0.2 and later, ensure that you are in the correct ADOM, if ADOMs are enabled. You must be in the same ADOM where you imported Snort signature files to FortiSigConverter MEA. FortiSigConverter MEA is unique in each ADOM.

To view custom IPS signatures in FortiManager:

1. In FortiManager, go to Policy & Objects, and expand Object Configurations.
2. In the tree menu, expand Security Profiles > IPS Signature.

   The custom IPS signatures from FortiSigConverter MEA are displayed in the content pane.

   

FortiManager 6.4

In FortiManager 6.4.x, you must enable IPS Custom Signature display options before you can view signatures from FortiSigConverter MEA in FortiManager.

You must be in the root ADOM.

To display custom IPS signatures in FortiManager:

1. In FortiManager, go to Policy & Objects > Object Configurations.
2. In the banner, click Tools > Display Options.
3. In the Security Profiles module, select IPS Custom Signature.
4. Click OK.

To view custom IPS signatures in FortiManager:

1. In FortiManager, go to Policy & Objects > Object Configurations.
2. In the tree menu, go to Security Profiles > IPS Custom Signature.

   The custom IPS signatures from FortiSigConverter MEA are displayed in the content pane.