Pushing converted signature rules to FortiManager

After you import Snort signature files to FortiSigConverter MEA, the signature rules are automatically converted to a Fortinet supported format, and you can push the converted signature rules to FortiManager.

If you are using FortiManager 7.0.2 and later and ADOMs are enabled, ensure you are in the correct ADOM. You can only push converted signature rules to the Policy & Objects module in the same ADOM as FortiSigConverter MEA.

After you push converted signature rules from FortiSigConverter MEA to FortiManager, they are displayed as custom IPS signatures on the Policy & Objects module.

To push converted signature rules:

1. Go to IPS Custom Signature.

   The list of imported Snort signature files is displayed.

   

2. Click an imported Snort file to view its list of converted signature rules.

   

3. Select one or more signature rules, and click Push to FortiManager.

   A confirm dialog box is displayed.

   

4. Click OK.

   A progress bar displays the status.

   

5. When the progress bar displays 100%, click OK to complete the process.