Quick start

This section provides a summary of how to get started with FortiSigConverter MEA:

1. Enable FortiSigConverter MEA. See Enabling FortiSigConverter MEA.
2. Import Snort signature files to FortiSigConverter MEA. See Importing Snort signature files.

   If you are using FortiManager 7.0.2 or later with ADOMs enabled, ensure you are in the correct ADOM before importing Snort signature files.

3. View converted Snort signature rules. See Viewing converted signature rules.
4. Push converted signature rules to FortiManager. See Pushing converted signature rules to FortiManager.
5. View signature rules on the Policy & Objects module in FortiManager. See Viewing signature rules on FortiManager.

   After you push converted signature rules from FortiSigConverter MEA to FortiManager, they are displayed as custom IPS signatures on the Policy & Objects module.

6. Export information from FortiSigConverter MEA about imported Snort signature files.
   • For information about imported Snort signature files, see Exporting Snort file lists.
   • For information about converted signature rules, see Exporting converted signature lists.
7. View the audit log. See Viewing the audit log.

You can also delete Snort files and converted signature rules from FortiSigConverter MEA. See Deleting imported Snort files.