Create or edit an application signature

If you have to detect an application that is not already in the application list, you can create an application signature:

1. Go to Security Profiles > Application Signatures and select Create New > Custom Application Signature. You can also go to Security Profiles > Application Control, click Create New, click View Application Signatures, and select Create New > Custom Application Signature.

2. Enter a name (no spaces) for the application signature in the Name field.

3. Enter a brief description in the Comments field.

4. Enter the text for the signature in the Signature field. The syntax for signatures is described in Valid syntax.

5. Click OK.

You can edit application signatures that you have created. Select the application signature and then click Edit.

Valid syntax

The following table shows the valid characters and basic structure. For details about each keyword and its associated values, see Custom signature keywords.

Field	Valid Characters	Usage
HEADER	F-SBID	The header for an attack definition signature. Each custom signature must begin with this header.
KEYWORD	Each keyword must start with a pair of dashes (--) and consist of a string of 1 to 19 characters. Normally, keywords are an English word or English words connected by an underscore (_). Keywords are case insensitive.	The keyword identifies a parameter.
VALUE	Double quotes (") must be used around the value if it contains a space and/or a semicolon (;). If the value is NULL, the space between the KEYWORD and VALUE can be omitted. Values are case sensitive. NOTE: If double quotes are used for quoting the value, the double quotes are not considered as part of the value string.	The value is set specifically for a parameter identified by a keyword.