Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

SEP Custom IPS Signature Conversion Tool for SNORT Signatures

Created: 07 Sep 2011 | 4 comments
thatdude's picture
8 Agree
0 Disagree
+8 8 Votes
Login to vote

Since SEP uses Snort like rules for the SEP custom HIPS signatures it would be nice if Symantec provided a tool that we could input the Snort signature and output the signature in the correct syntax for SEP HIPS custom signatures.

At the very least a front end wizard would be nice so that the admin simply fills in the information and then the wizard spits out the correct syntax with the information the admin has entered.

Comments

Vikram Kumar-SAV to SEP's picture
26
Sep
2011
1 Vote +1
Login to vote

I agree with you. Customers

I agree with you. Customers should be able to create Custom IPS Signature in a more User Friendly way.

Also if there a way to convert the Snort rules to SEP IPS rule or if we can get a detailed guideline on how to convert a SNORT rule to SEP IPS rule.

Brian81's picture
27
Sep
2011
0 Votes 0
Login to vote

This is a great idea and

This is a great idea and would be very handy for advanced rule writing.

cus000's picture
02
Feb
2012
0 Votes 0
Login to vote

I support.   More tools or

I support.

 

More tools or guide would be helpfull to create custom IPS rule (s)...

John Cooperfield's picture
11
May
2012
0 Votes 0
Login to vote

Yes!

Yes indeed.