Fortinet black logo
7.0.2

Exporting converted signature lists

Exporting converted signature lists

After you import a Snort signature file into FortiSigConverter MEA, you can export a list of converted signatures. An export.csv file of information is downloaded to your computer.

To export a converted signature list:
  1. Go to IPS Custom Signature.

    The list of imported Snort files is displayed.

  2. Click a Snort file to view its list of converted signatures.
  3. In the toolbar, click Export Signature list.

    An export.csv file is downloaded to your computer and contains the following information:

    Signature Names The IPS signature name.
    Conversion Status

    The conversion status.

    TRUE = The conversion was successful.

    FALSE = The conversion failed.

    Pushed to FortiManager

    Indicates if the signature rule was pushed to FortiManager.

    1 = The signature rule was pushed to FortiManager.

    -1 = The signature rule was not pushed to FortiManager .

    Original Signatures The Snort signature before it was converted in FortiSigConverter MEA.
    Converted Signatures The signature after it was converted to a supported IPS signature.

Exporting converted signature lists

After you import a Snort signature file into FortiSigConverter MEA, you can export a list of converted signatures. An export.csv file of information is downloaded to your computer.

To export a converted signature list:
  1. Go to IPS Custom Signature.

    The list of imported Snort files is displayed.

  2. Click a Snort file to view its list of converted signatures.
  3. In the toolbar, click Export Signature list.

    An export.csv file is downloaded to your computer and contains the following information:

    Signature Names The IPS signature name.
    Conversion Status

    The conversion status.

    TRUE = The conversion was successful.

    FALSE = The conversion failed.

    Pushed to FortiManager

    Indicates if the signature rule was pushed to FortiManager.

    1 = The signature rule was pushed to FortiManager.

    -1 = The signature rule was not pushed to FortiManager .

    Original Signatures The Snort signature before it was converted in FortiSigConverter MEA.
    Converted Signatures The signature after it was converted to a supported IPS signature.